Question 610
A floor switch connects APs but the uplink passes only the native VLAN while employee and voice SSIDs use tagged VLANs. Which ongoing operational safeguard best reduces the chance of recurrence?
Explanation
Correct Answer
This is a continuing control for the failure mode in which the trunk's allowed-VLAN list excludes the tagged client networks. It complements the immediate fix instead of relying on a one-off correction.
Incorrect Answers
That control is useful for a different failure, such as when a campus switch forwards IPv4 client traffic but cannot send SNMP traps to a server because the trap destination is reachable only through another VRF. It would leave the present failure mode insufficiently addressed.
That control is useful for a different failure, such as when an endpoint sees physical carrier on an Aruba CX port but the administrator configured the port administratively disabled. It would leave the present failure mode insufficiently addressed.
That control is useful for a different failure, such as when a wireless building is connected to the core but a user VLAN is mapped inconsistently between the SSID profile and switch trunk. It would leave the present failure mode insufficiently addressed.