Policy requires least privilege on AP switch drops across city buildings. Which VLAN-trunk practice best matches that hygiene?
Select an answer to reveal the explanation.
Short Explanation
Least privilege means AP trunks carry what that floor needs—not the entire VLAN catalog. Trunking everything “just in case” is convenience over hygiene. Clients inventing tags is not a plan.
Full Explanation
Limiting VLAN trunks on AP switch drops to the VLANs required at each site enforces least privilege and reduces exposure if an AP or drop is compromised. Trunking every VLAN to every AP expands the blast radius contrary to wired support hygiene for WLANs. Relying on clients to invent tags or disabling STP for speed introduces additional risk.