City SOC requirements say the WLAN monitoring system must alert when a rogue AP advertises the same corporate SSID. Leadership offers only switch SNMP uptime polls. What capability gap must be closed?
Select an answer to reveal the explanation.
Short Explanation
Uptime pings tell you a switch is alive—they do not notice an evil twin yelling your SSID in the lobby. You need WIPS-class wireless monitoring for that alert. Hiding the SSID does not retire the requirement.
Full Explanation
Rogue and evil-twin detection requires wireless monitoring that observes 802.11 advertisements and threat signatures. SNMP-based availability monitoring of infrastructure does not inspect RF for same-SSID impostors. Security designs must specify WIPS/WIDS capabilities when rogue alerting is a requirement. SSID cloaking is not an adequate substitute for detection.