Hidden SSID vs. credential failures in WLAN client discovery

350-401 By islever Editorial Last updated

Short answer

B Manually enter the hidden SSID on the client, since cloaked SSIDs are omitted from beacon frames and cannot be discovered by scanning.

Question

A client device fails to see the enterprise SSID, but other client devices are connected to it.
What is the cause of this issue?
  1. The client has incorrect credentials stored for the configured broadcast SSID.
  2. The hidden SSID was not manually configured on the client. Correct Answer
  3. The broadcast SSID was not manually configured on the client.
  4. The client has incorrect credentials stored for the configured hidden SSID.

Key Takeaways

It tests the boundary between discovery failure and association failure; the trap is choosing a stored-credentials option (A or D) when the symptom is that the SSID is never visible.

This 350-401 wireless question tests why one client cannot see an SSID that others are using. The answer is B: a hidden (cloaked) SSID must be manually entered on the client, because it is omitted from beacon frames.

Common mistake: Option D — blaming incorrect credentials for a hidden SSID. Wrong credentials let the client see the SSID but fail to join; this client cannot see it at all, so the missing manual SSID entry (B) is the cause.

Expert Analysis

The visibility test decides it

The question says the client fails to see the enterprise SSID, while other clients are already connected. That asymmetry is the whole diagnostic: an SSID that others join is being broadcast normally, so this is not a global AP or controller problem — it is a client-side view problem. Two distinct failure layers exist here, and the exam is testing whether you can tell them apart: association/authentication failure (client sees the SSID but cannot join) versus discovery failure (client never sees the SSID at all).

Hidden (cloaked) SSIDs and discovery

When an SSID is configured as hidden — network cloaking — the AP simply omits it from beacon frames. A client cannot "see" it in a scan; the only way to reach it is to enter the SSID manually, after which the client probes for it directly. Option B describes exactly this: the hidden SSID was not manually configured on the client. This matches the reported symptom precisely, and one comment argues for B on precisely these grounds, citing the network-cloaking behaviour.

Why the credential options are wrong

Options A and D talk about incorrect stored credentials. Wrong credentials produce an association or 4-way-handshake failure: the client would still list the SSID and then fail to connect — a different symptom than "cannot see". They also presuppose knowing whether the SSID is broadcast or hidden, which the scenario never states. Option C is self-defeating: a broadcast SSID needs no manual entry, and if it were unconfigured the client would simply join it after scanning.

Therefore the correct choice is B — the cloaked SSID requires manual entry on that client, and its absence from the client's scan is why it appears to be missing.

Exam Strategy

Anchor on the exact symptom verb: "cannot see" points to discovery (hidden/cloaked SSID), while "cannot connect" points to credentials or security mismatch. Then check the client-specific framing — if other clients work, eliminate AP/controller-wide causes. Finally, discard options that describe the wrong layer: a broadcast SSID never needs manual entry, so any option pairing "broadcast" with manual configuration can be eliminated immediately.

Frequently Asked Questions

Why can't this client see the enterprise SSID when other clients are connected?

The SSID is hidden (cloaked), so it is excluded from beacon frames. Other clients joined because they were configured with the SSID manually; this client was not, so it never discovers the network during a scan.

Would wrong Wi-Fi credentials stop a client from seeing an SSID?

No. With incorrect credentials the SSID still appears in the scan list, but association or the 4-way handshake fails. Credential problems present as "cannot connect," not "cannot see."

How do clients connect to a hidden SSID?

The user must type the exact SSID (and security profile) manually. The client then sends directed probe requests for that SSID instead of relying on beaconed broadcast networks.

More 350-401 FAQ →

Community Votes

D
50%
B
50%

50% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. edg 👍 10
    The answer is "B". https://en.wikipedia.org/wiki/Network_cloaking
  2. Derek 👍 1 Answered D
    Whilst the configuration of a hidden SSID is mandatory, it's not to "configure" on client. I think it's the credential error causing the issue.
  3. Aldebeer 👍 1 Answered B
    the hidden SSID is the issue of not seen.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Practice All 350-401 Questions

Access 218 questions with complete answers and detailed explanations.

View Full 350-401 Practice Test →

← Back to 350-401 Study Guide