City visitor Wi-Fi must not reach staff file shares or internal VLANs. Which guest-access design best meets that goal?
Select an answer to reveal the explanation.
Short Explanation
Guest Wi-Fi is the sidewalk café—Internet coffee, not keys to City Hall file rooms. Park visitors on an isolated SSID with Internet-only policy and keep staff VLANs out of reach. Shared payroll VLANs are how cafés become break-ins.
Full Explanation
Guest WLAN design for municipalities centers on segmentation: separate SSID/VLAN constructs, firewall or ACL policies that block staff resources, and typically Internet-only egress. Co-locating guests with sensitive internal systems defeats isolation. Temporary firewall holes for convenience recreate lateral paths attackers exploit.