CompTIA DataX (CNX-001) — Question 80

A network engineer is setting up guest access on a Wi-Fi network. After a recent network analysis, the engineer discovered that a user could access the guest network and attack the corporate network, since the networks share the same VLAN. Which of the following should the engineer do to prevent an attack like this one from happening?

Answer options

• A. Configure Layer 2 client isolation for the wireless network.
• B. Set up a MAC filtering rule and add the MAC addresses of all corporate devices to the allow list.
• C. Set up a strong password on the guest wireless network.
• D. Set up a captive portal so all guest users have to register before gaining access to the wireless network.

Correct answer: A

Explanation

The correct answer is A because configuring Layer 2 client isolation prevents devices on the guest network from communicating with devices on the corporate network, thus protecting it from potential attacks. Options B and C do not address the fundamental issue of network isolation, while D adds a layer of control but does not stop an intruder from accessing the corporate network if they connect to the same VLAN.