Guest Wi-Fi at the civic center uses an email click-through portal, while the staff SSID uses PEAP. What design principle should remain true?
Select an answer to reveal the explanation.
Short Explanation
Right lock for the right door: guests can click an email portal; staff still need PEAP (or better) on the staff SSID. Don’t drag employees onto the guest path or borrow staff passwords for visitors.
Full Explanation
Authentication strength should match SSID role. Guest click-through may be acceptable for Internet-only visitors, while staff SSIDs retain Enterprise methods such as PEAP. Consolidating staff onto guest portals, feeding staff AD passwords into guest flows, or dropping staff encryption because a guest email was collected misaligns controls to purpose.