Visitors at a city hall are given the employee pre-shared key so they can get online. They land on the employee WLAN and can see employee servers. What should replace that shortcut?
Select an answer to reveal the explanation.
Short Explanation
You handed visitors the keys to the office. A guest WLAN with a guest policy is the doorway that keeps them off employee servers. A second copy of the employee key does not build that doorway.
Full Explanation
An employee pre-shared key on the employee WLAN makes a visitor an employee as far as the network is concerned. Visitors can see employee servers because the shortcut does not place them under a guest policy. Replace it with a guest WLAN and a guest policy that keep visitors off the employee network. A second copy of the employee key is still an employee credential; a different passphrase of the same type does not create isolation. Isolation comes from the policy and the network the WLAN places visitors on. Hiding the employee SSID does not convert visitors into guests or change the policy, and a shorter beacon does not block employee servers when the visitor count is high. Visitors were given the employee pre-shared key, which is not a guest design; they need a guest WLAN and guest policy. Exam caveat: the guest policy must include the VLAN, DNS, and filter. A WLAN named Guest that still uses the employee VLAN is the same shortcut with a new label. Practical check: connect a visitor to the guest WLAN and confirm that an employee server does not respond.