A warehouse barcode scanner cannot support WPA3 and must remain on a constrained SSID. How should the exception be handled?
Select an answer to reveal the explanation.
Short Explanation
Legacy gear gets a ticket with an expiration date and extra fences—not a free pass to the crown jewels. Write the exception, isolate it, watch it, replace it. Secret exceptions and MAC cloning are how audits go sideways.
Full Explanation
Risk-accepted exceptions for incapable clients should be documented, time-bounded, and paired with compensating controls such as segmentation and monitoring. Expanding trust, hiding exceptions, or permanently bypassing authentication contradicts security lifecycle practice.