A security whiteboard at the water treatment plant labels “CCMP/GCMP” as protecting all 802.11 management and data frames equally. What correction belongs in the design notes?
Select an answer to reveal the explanation.
Short Explanation
Data ciphers wrap the payload traffic; management-frame protection is a different seatbelt for deauth and friends. Mixing those labels on the whiteboard confuses monitoring and hardening plans. Keep data encryption and MFP as sibling controls, not one blob.
Full Explanation
AES-based link ciphers (CCMP/GCMP) provide confidentiality and integrity for data frames under the selected RSN suite. Protection of management frames is addressed through management frame protection / protected management frames, which is conceptually separate. Design documentation should not collapse those controls into a single inaccurate statement. Clear scope supports correct monitoring and hardening decisions.