A county asks for the simplest remediation when WPS is enabled on APs but is not required for onboarding. What should be recommended?
Select an answer to reveal the explanation.
Short Explanation
If nobody needs the easy button, turn WPS off—on the AP or the controller. Renaming the SSID or posting the PIN is theater. Dragging guests back to WEP makes things worse.
Full Explanation
When push-button or PIN onboarding is unnecessary, disabling WPS removes an avoidable attack surface that can lead to PSK recovery on vulnerable gear. Cosmetic SSID changes, publishing PINs, or regressing to WEP do not constitute sound remediation and can increase risk.