A company wants to provide internet access to visitors in its lobby. A network technician needs to ensure that visitors cannot access the company's internal servers and sensitive data. Which of the following is the BEST method to achieve this goal?
Enable MAC filtering on the primary corporate access point.
Configure a firewall to block all traffic from visitor devices.
Provide visitors with the password to the primary corporate Wi-Fi network.
The best method for providing internet access to guests while protecting the internal network is to implement network segmentation. Creating a separate guest network, often on its own Virtual LAN (VLAN), effectively isolates guest traffic from the internal corporate network. This allows guests to access the internet without being able to reach sensitive internal resources. Providing the corporate Wi-Fi password would grant visitors access to the internal network, which is a significant security risk. MAC filtering is used to control which specific devices can connect but does not segment traffic for a group of unknown guest devices. Blocking all traffic with a firewall would prevent guests from accessing the internet entirely, defeating the objective.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is network segmentation?
Open an interactive chat with Bash
How does guest network access work?
Open an interactive chat with Bash
What are the security benefits of a separate guest network?