A municipal security architect describes defense-in-depth for WLAN user traffic as it leaves the air and enters the wired campus. Which stacked control set best matches that layered approach?
Select an answer to reveal the explanation.
Short Explanation
Defense-in-depth for Wi-Fi isn’t one hero control—it’s locks on the air (strong AKM/ciphers), lanes on the wire (VLANs), and a gatehouse (firewall) for what leaves the neighborhood. Skip the stack and you’re hoping antivirus covers for bad architecture.
Full Explanation
Layered WLAN security combines RF confidentiality and integrity via appropriate AKM and ciphers, wired segmentation such as VLANs for different user classes, and firewall or ACL enforcement for traffic leaving or crossing zones. Open flat networks, disabling encryption for monitoring convenience, or hairpinning APs to the public Internet without segmentation contradict defense-in-depth design for municipal campuses. Stacking these controls is how civic architects keep air-link, campus, and north-south risks from sharing a single failure point.