CompTIA Security+ (SY0-601) — Question 453

A company is planning to install a guest wireless network so visitors will be able to access the internet. The stakeholders want the network to be easy to connect to so time is not wasted during meetings. The WAPs are configured so that power levels and antennas cover only the conference rooms where visitors will attend meetings. Which of the following would best protect the company's internal wireless network against visitors accessing company resources?

Answer options

• A. Configure the guest wireless network to be on a separate VLAN from the company’s internal wireless network.
• B. Change the password for the guest wireless network every month.
• C. Decrease the power levels of the access points for the guest wireless network.
• D. Enable WPA2 using 802.1X for logging on to the guest wireless network.

Correct answer: A

Explanation

The correct answer is A because placing the guest wireless network on a separate VLAN effectively isolates it from the internal network, preventing unauthorized access to company resources. Options B and C do not provide sufficient protection, as changing passwords and decreasing power levels do not isolate the networks. Option D enhances security for the guest network but does not prevent access to the internal network.