220-1101 Question 322
Single answerConfiguration settingsA technician is configuring a SOHO wireless router for a small accounting office. Employees report that visitors in the lobby can currently see and connect to the same wireless network used by office workstations, which is a security concern. The office wants visitors to have Internet access, but they must not be able to access internal PCs, printers, or shared folders. Which router configuration setting should the technician implement FIRST to meet this requirement?
- A
Enable the guest network/guest SSID feature and isolate it from the internal LAN
- B
Change the wireless channel from Auto to channel 11
- C
Disable DHCP on the router so guests cannot obtain IP addresses automatically
- D
Enable UPnP so the router can manage internal device access automatically
Show answer and explanation
Correct answer: A
Explanation
The best answer is to enable a guest network/guest SSID with isolation from the primary LAN. In SOHO router configuration, guest wireless access is a standard feature used to provide Internet connectivity to visitors without exposing internal systems. This aligns with common vendor documentation for consumer and small-business wireless routers, which typically describes guest networking as a way to restrict guest access to local network resources while still allowing Internet access. Channel settings affect RF performance, DHCP controls address assignment rather than segmentation, and UPnP manages application connectivity rather than user isolation. For A+ Core 1, configuration settings questions often test whether the candidate can choose the router feature that directly addresses the stated business need.
- A. Correct.
Correct. A guest network or guest SSID is specifically designed to provide Internet access to visitors while separating them from the primary internal network. On many SOHO routers, this feature includes client isolation or restrictions that prevent guest users from reaching internal devices such as shared printers, PCs, and NAS units. This is the most direct configuration setting to satisfy the business requirement.
- B. Incorrect.
Incorrect. Changing the wireless channel can help reduce interference and improve performance, but it does not separate guest users from internal resources. Someone might choose this if they are thinking about wireless reliability rather than access control.
- C. Incorrect.
Incorrect. Disabling DHCP would make it harder for all wireless clients to connect unless they manually configure IP settings, but it would not provide proper segmentation or security. Guests could still potentially access the network if they configured valid addresses manually. This is a common misconception that reducing convenience equals improving security.
- D. Incorrect.
Incorrect. UPnP is used to simplify port mappings for applications and devices, not to isolate guest traffic from the internal LAN. In many environments, unnecessary UPnP use can increase security risk rather than improve network segmentation.