A city WLAN team sees WIPS alerts, RADIUS rejects, and switchport flapping but they live in separate consoles. Which monitoring approach best correlates those events centrally?
Select an answer to reveal the explanation.
Short Explanation
Separate consoles are like three city radios that never talk to dispatch. SIEM is the shared desk that lines WIPS RF alerts up with RADIUS and switchport clues. Without that correlation, you chase ghosts in three different windows.
Full Explanation
SIEM platforms aggregate and correlate security telemetry from wireless intrusion systems, authentication servers, and wired infrastructure. CWSP monitoring practice treats SIEM as the hub that turns isolated WIPS, RADIUS, and switchport signals into actionable WLAN security context. Local AP LEDs and ticket-only workflows lack cross-source correlation, and weakening authentication to silence logs increases risk rather than visibility.