SY0-701 Question 258
Single answerInstallation considerations: Site surveys , Heat mapsA security administrator is deploying new wireless access points in a healthcare clinic that handles sensitive patient data. The clinic wants strong Wi-Fi coverage for authorized staff while minimizing signal leakage into the public parking lot and neighboring offices. Before finalizing AP placement, the administrator wants to identify building materials, interference sources, and areas where the signal may extend beyond the facility. Which action would BEST support this goal?
- A
Conduct a wireless site survey and generate heat maps showing coverage and signal propagation throughout the facility
- B
Increase all access points to maximum transmit power so staff devices can connect from anywhere in and around the building
- C
Disable SSID broadcast on all access points to prevent the wireless network from being detected outside the clinic
- D
Deploy a wireless intrusion prevention system first and use its alerts to determine where access points should be installed
Show answer and explanation
Correct answer: A
Explanation
The best answer is to conduct a wireless site survey and use heat maps. In Security+ objectives related to secure wireless implementation and installation considerations, site surveys are used to evaluate the physical environment before deployment. Heat maps provide a practical visualization of signal coverage, weak spots, and RF leakage beyond secure boundaries. This is especially important in regulated environments like healthcare, where organizations should limit unnecessary wireless exposure while maintaining reliable connectivity for authorized users. Industry best practices from wireless vendors and design guides consistently recommend predictive and/or active site surveys to account for attenuation from walls, medical equipment interference, and external exposure areas before finalizing AP placement and transmit power settings.
- A. Correct.
Correct. A wireless site survey is the appropriate pre-deployment activity to assess environmental conditions such as wall composition, RF interference, dead zones, and signal bleed outside controlled areas. Heat maps visually represent signal strength and coverage, helping the administrator optimize AP placement and power levels to support business needs while reducing unintended exposure. This is a standard best practice for secure wireless installations, especially in environments handling sensitive data.
- B. Incorrect.
Incorrect. Raising all APs to maximum transmit power often increases signal leakage beyond the building perimeter, which is the opposite of the stated goal. It can also create co-channel interference and uneven cell sizes. A common misconception is that stronger signal automatically means better security and performance; in reality, proper tuning based on survey results is more secure and effective.
- C. Incorrect.
Incorrect. Disabling SSID broadcast does not prevent detection of the wireless network by an attacker or survey tools, because management frames and client activity still reveal the network. This option addresses obscurity rather than proper wireless design. It does not help identify interference, building attenuation, or signal propagation outside the clinic.
- D. Incorrect.
Incorrect. A wireless intrusion prevention system can help detect rogue devices and malicious wireless activity, but it is not the best first step for determining physical AP placement. WIPS is a security monitoring and response control, not a replacement for a site survey and heat map analysis during installation planning.