Exam CNX-001 topic 1 question 84 discussion

Actual exam question from CompTIA's CNX-001

Question #: 84
Topic #: 1

A network engineer is setting up guest access on a Wi-Fi network. After a recent network analysis, the engineer discovered that a user could access the guest network and attack the corporate network, since the networks share the same VLAN. Which of the following should the engineer do to prevent an attack like this one from happening?

A. Configure Layer 2 client isolation for the wireless network.
B. Set up a MAC filtering rule and add the MAC addresses of all corporate devices to the allow list.
C. Set up a strong password on the guest wireless network.
D. Set up a captive portal so all guest users have to register before gaining access to the wireless network.

Show Suggested Answer

Suggested Answer: A 🗳️

by SuntzuLegacy at May 19, 2025, 3:58 a.m.

Comments

Submit Cancel

SuntzuLegacy

1 month, 1 week ago

Selected Answer: A

Answer: A. Configure Layer 2 client isolation for the wireless network. Client isolation prevents guest users from directly accessing other subnets (including the corporate network) on the same Wi-Fi SSID/VLAN. While it is generally preferable to assign guest traffic to a separate VLAN altogether, if that option is not available, enabling Layer 2 client isolation is the best way—among the provided choices—to ensure a guest user cannot pivot into corporate resources.

upvoted 1 times

...