Which practice ensures wireless security after personnel changes?

• A. Change encryption keys whenever someone with knowledge of the keys leaves or changes positions
• B. Never change encryption keys
• C. Change encryption keys anytime someone with knowledge of the keys leaves or changes positions
• D. Change keys only after a breach

Answer: (C)

Key management and timely revocation are the focus here. When someone who knows the encryption keys leaves or changes roles, re-keying immediately prevents that person from continuing to access or decrypt data. This proactive rotation closes the door on any insider risk and keeps the wireless security posture strong as personnel changes occur.

Why this approach is best: it validates the principle of least privilege in the key's lifecycle. By re-keying whenever access could be compromised, you stop potential misuse before it can happen and avoid relying on post-incident actions.

Why the other options don’t fit: never changing keys leaves open the possibility that someone who once had access could still decrypt traffic or data. changing keys only after a breach is too late—the breach has already occurred, and attackers may have had time to act.