County IT wants guest Wi-Fi traffic kept out of the campus core and terminated in a DMZ. Which approach best supports that isolation goal?
Select an answer to reveal the explanation.
Short Explanation
Guests should not wander the campus core. Tunneling guest WLAN traffic to a DMZ concentrator parks them where isolation belongs. Sharing finance VLANs or skipping tunnels invites lateral mischief.
Full Explanation
Tunneling guest WLAN traffic to a DMZ concentrator is a common WLAN security architecture pattern that keeps untrusted wireless users off the campus core. The concentrator becomes the policy and Internet-egress point for guests. Placing guests on sensitive staff VLANs or relying on local adjacency without isolation defeats the design intent for civic guest networks.