300-430 Question 197
Single answerAn enterprise is deploying a wireless solution to support a BYOD and guest network. The IT team wants to ensure that guest users are isolated from the internal network while BYOD users are allowed limited access to specific corporate resources. Which solution would best meet these requirements?
- A
Implement a separate SSID for guests and configure VLAN tagging for BYOD users on the same SSID.
- B
Configure a single SSID for both BYOD and guest users, using WPA2-Enterprise with RADIUS authentication.
- C
Create separate SSIDs for BYOD and guests, and use different VLANs to segment the traffic.
- D
Use a single SSID for both BYOD and guest users, and apply a shared pre-shared key (PSK) for authentication.
Show answer and explanation
Correct answer: C
Explanation
To meet the requirements of isolating guest users and providing limited access to BYOD users, the best approach is to configure separate SSIDs for BYOD and guests. By assigning different VLANs to each SSID, the network administrator can ensure proper segmentation and apply specific policies for each user group. This approach enhances security and ensures compliance with enterprise network standards.
- A. Incorrect.
While this option uses separate VLAN tagging for BYOD, combining BYOD and guest users on the same SSID can lead to challenges in traffic segmentation and security policy enforcement.
- B. Incorrect.
Using a single SSID with WPA2-Enterprise and RADIUS authentication may be suitable for BYOD, but it does not address the need to isolate guest users effectively.
- C. Correct.
This is the correct solution as it ensures that BYOD and guest users are segmented by using separate SSIDs and VLANs, meeting both isolation and limited access requirements.
- D. Incorrect.
Using a shared PSK for both BYOD and guest users lacks proper segmentation and does not provide the fine-grained access control needed for BYOD users.