Visitors to city hall need Internet-only Wi-Fi and must not use staff directory credentials. What authentication path should the designer choose?
Select an answer to reveal the explanation.
Short Explanation
Guests shouldn’t borrow the employee badge printer. Give them their own on-ramp—guest SSID, portal, or sponsor flow—and keep staff Enterprise auth out of it. Mixing realms or handing out staff secrets is how lobbies become back doors.
Full Explanation
Guest Internet access should use authentication and network paths separate from the staff Enterprise SSID and AAA realm so visitors never handle employee credentials. Shared staff SSIDs, exposed RADIUS secrets, or casually issuing staff-realm client certificates to visitors violate that separation. A dedicated guest design satisfies Internet-only access without staff credential reuse.