Public library Wi-Fi must serve patrons without reaching staff file shares or the integrated library system. Which wireless design best enforces that separation?
Select an answer to reveal the explanation.
Short Explanation
Patrons need Internet, not a shortcut into HR folders. Separate SSIDs and VLANs with a firewall that says 'guests stop here' keep library public Wi-Fi from becoming a free lobby into staff systems.
Full Explanation
Guest and public wireless must be isolated from enterprise resources through SSID separation, VLAN/VRF isolation, and restrictive firewall policy. Captive portals alone do not enforce authorization to staff file shares or core applications. Bridging guest users into staff networks violates least privilege and exposes municipal library systems to untrusted devices.