Field tablets for public-works crews sometimes lack Internet paths when validating certificates during EAP. What PKI concern should the WLAN security design address?
Select an answer to reveal the explanation.
Short Explanation
Revocation checks are like calling the DMV to see if a license is still good—if the phone has no signal, the check stalls. Designs need reachable CRL/OCSP or sensible caching so outdoor crews are not stranded and revoked certs are not ignored forever. Hiding the SSID or falling back to WEP is not a PKI answer.
Full Explanation
Certificate-based WLAN authentication depends on clients and AAA validating certificate status, commonly via CRL or OCSP. Offline or poorly connected municipal clients may fail those checks unless the design provides reachable responders, stapling, or appropriate cache/fallback behavior. Deprecated crypto and SSID cloaking do not solve revocation-path problems.