Question 10
A floor switch connects APs but the uplink passes only the native VLAN while employee and voice SSIDs use tagged VLANs. Which immediate engineering change most directly addresses this issue?
Explanation
Correct Answer
The underlying issue is that the trunk's allowed-VLAN list excludes the tagged client networks. This intervention addresses that cause directly. A useful result to confirm is: tagged client frames pass the uplink on their intended VLANs without native-VLAN leakage.
Incorrect Answers
This is suited to a different condition, such as when a campus uses a highly available DNS name for the NAC service, yet one site resolves an obsolete server address. The reported fault instead arises because the trunk's allowed-VLAN list excludes the tagged client networks.
This is suited to a different condition, such as when a newly added downstream stack is reachable by ping but cannot complete Central group onboarding because it appears under the wrong tenant. The reported fault instead arises because the trunk's allowed-VLAN list excludes the tagged client networks.
This is suited to a different condition, such as when an IoT reader operates only at 100 Mbps, while the switch port is forced to a gigabit-only setting. The reported fault instead arises because the trunk's allowed-VLAN list excludes the tagged client networks.