County policy requires AES-CCMP for the assessor’s office WLAN and forbids mixed TKIP/AES profiles. A controller template still offers “TKIP+AES” mixed mode. What should the designer do?
Select an answer to reveal the explanation.
Short Explanation
Mixed TKIP+AES is the halfway house policy already banned. Lock the template to AES-CCMP only and deal with stubborn clients through remediation or isolation—not by reopening the deprecated door. Cipher policy only works if the profile matches the paper.
Full Explanation
When policy mandates AES-CCMP, WLAN profiles must not advertise mixed TKIP/AES transition modes that reintroduce deprecated cryptography. Designers enforce CCMP-only (or otherwise approved modern) cipher suites and handle incompatible clients through upgrade, replacement, or segmented exceptions under change control. WEP or open/unencrypted SSIDs violate the requirement. Encryption selection must track written security policy.