Security Issues and Configuration Synchronization: Possible Reasons | Cisco Exam 400-351

Possible Reasons for Security Index Not Changing After Configuration Synchronization

Question

The IT manager acknowledges that some security issues that are shown in a detailed security index report violate company policies.

However, the security index does not change after synchronizing the configuration of the Cisco WLC on Cisco WCS.

What are two possible reasons for this issue? (Choose two.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

AB.

The security index report in Cisco Wireless Control System (WCS) provides a score that reflects the overall security level of the wireless network. This score is based on the security settings and configurations of the controllers and WLANs that are managed by the WCS.

When the IT manager acknowledges that some security issues violate company policies, the security index report should reflect this by showing a decrease in the security score. However, if the security index does not change after synchronizing the configuration of the Cisco WLC on Cisco WCS, there could be two possible reasons for this:

  1. The acknowledged issue is on a controller that does not directly affect the security index score (for instance, it is not the controller with the lowest score).

The security index report takes into account the security settings and configurations of all the controllers and WLANs that are managed by the WCS. However, not all controllers or WLANs have the same impact on the overall security index score. For example, a controller that is responsible for managing a small branch office with only a few WLANs may have a lower impact on the security index score than a controller that manages a large campus with many WLANs.

If the acknowledged issue is on a controller that has a lower impact on the security index score, the security index may not change significantly after synchronizing the configuration of the Cisco WLC on Cisco WCS.

  1. The acknowledged issue is on a WLAN that does not directly affect the security index score. Only the lowest scoring WLAN of the lowest scoring controller affects the security index score.

The security index score is based on the lowest scoring WLAN of the lowest scoring controller. This means that even if there are several WLANs with security issues, the security index score will only be affected by the lowest scoring WLAN of the lowest scoring controller.

If the acknowledged issue is on a WLAN that does not have a direct impact on the security index score, the security index may not change significantly after synchronizing the configuration of the Cisco WLC on Cisco WCS.

In summary, if the security index does not change after synchronizing the configuration of the Cisco WLC on Cisco WCS, it could be due to the acknowledged issue being on a controller or WLAN that does not have a significant impact on the security index score. It is important to identify the root cause of the security issue and take appropriate actions to address it to ensure the overall security of the wireless network.