Question

A retail company offers free Wi-Fi to customers. During a security review, an analyst discovers that guest wireless clients can reach the corporate point-of-sale (POS) VLAN and the internal file server VLAN. The business requires that guests retain internet access but be prevented from reaching any internal corporate resources. Which network control most directly addresses this requirement?

Accepted Answer

Place guest traffic in a dedicated VLAN and apply an ACL that permits internet-bound traffic while denying flows to internal corporate subnets

Answer

Enable 802.1X authentication on the guest SSID so users must supply corporate credentials before connecting

Answer

Deploy a host-based intrusion prevention agent on every POS terminal and file server

Answer

Increase the DHCP lease time on the guest VLAN to reduce address reuse across sessions