Learn the best way to secure your company’s internal wireless network while providing easy guest access. Discover the optimal configuration for separating guest and internal networks.
Table of Contents
Question
A company is planning to install a guest wireless network so visitors will be able to access the internet. The stakeholders want the network to be easy to connect to so time is not wasted during meetings. The WAPs are configured so that power levels and antennas cover only the conference rooms where visitors will attend meetings. Which of the following would best protect the company’s internal wireless network against visitors accessing company resources?
A. Configure the guest wireless network to be on a separate VLAN from the company’s internal wireless network.
B. Change the password for the guest wireless network every month.
C. Decrease the power levels of the access points for the guest wireless network.
D. Enable WPA2 using 802.1X for logging on to the guest wireless network.
Answer
A. Configure the guest wireless network to be on a separate VLAN from the company’s internal wireless network.
Explanation
A. Configuring the guest wireless network to be on a separate VLAN from the company’s internal wireless network is the best option to protect the company’s resources. By placing the guest network on a separate VLAN, network traffic between the guest network and the internal network is isolated at the Layer 2 level. This prevents visitors from accessing sensitive company resources, even if they manage to connect to the guest network. VLANs provide logical segmentation of the network, ensuring that guest traffic remains separate from the internal network traffic, thus maintaining the security and integrity of the company’s resources.
CompTIA Security+ 2021 SY0-601 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the CompTIA Security+ 2021 SY0-601 exam and earn CompTIA Security+ 2021 SY0-601 certification.