A public wireless dataset lists a BSSID near City Hall whose OUI maps to a manufacturer that is not on the city’s AP contract. How should the analyst treat that?
Select an answer to reveal the explanation.
Short Explanation
The first six of a BSSID are a maker’s badge in public datasets. If that badge is not the city’s contracted brand, flag unexpected hardware—do not declare fraud or push firmware at the AP. It is a clue, not a courtroom.
Full Explanation
Organizationally unique identifiers (OUIs) derived from public BSSID values can indicate a manufacturer. When that manufacturer is absent from the civic AP contract, the mismatch is an observational due-diligence clue for IT—not proof of contract fraud and not a license to modify firmware. OUI lookups are a standard public-data technique because prefixes are published. Stale maps, cloned BSSIDs, and visitor APs are alternative explanations the report should leave open.