New outdoor APs for parks still ship with vendor default admin passwords. What baseline hygiene is mandatory before production use?
Select an answer to reveal the explanation.
Short Explanation
Factory passwords are public knowledge dressed up as convenience. Change them—uniquely—before park APs see real traffic. Matching stickers and one citywide default are gifts to anyone with a ladder and a laptop.
Full Explanation
New outdoor APs for parks that still ship with vendor default admin passwords must have those defaults replaced with unique, managed admin passwords before production use. Default credentials are publicly documented and will be tried by anyone who finds the management interface on a poorly segmented park network. Baseline hygiene is mandatory for civic outdoor infrastructure that may sit on poles and eaves for years.
Leaving defaults so any technician can log in without a password vault guarantees unauthorized access. Printing the default password on a weatherproof sticker beside each AP advertises the secret in public space. Reusing one default password across every AP citywide turns a single leak into a citywide compromise.
Exam caveat: unique passwords should live in an enterprise secrets vault with rotation and break-glass procedures—not in a shared spreadsheet titled final. Operational check: attempt login with the vendor default after staging, confirm failure, verify vaulted unique credentials succeed, and sample multiple APs for password uniqueness. In municipal WLAN programs, write the control into standards and verify it during change review so the next project inherits the same bar rather than rediscovering the failure mode under outage pressure.