Examkin

Question

Difficulty: HardWireless Security and Authentication

An IT technician is troubleshooting a newly deployed guest Wi-Fi network in a medical clinic. Guests are able to connect to the WPA3-Personal wireless network using a shared passphrase, but several patients report that their mobile devices can discover and attempt to access local network resources, including shared medical printer queues and other connected guest devices. Which of the following configurations should the technician enable on the wireless access point to isolate guest traffic and limit their access strictly to the internet?

  1. Wireless Client Isolation (AP Isolation)Answer
  2. B
    WPA3-Enterprise mode with a RADIUS server
  3. C
    MAC address filtering for all connected guest endpoints
  4. D
    TKIP cipher suite enforcement across the access point

Answer

Enabling Wireless Client Isolation (AP Isolation) on the access point.
Wireless Client Isolation operates at the access point level to prevent connected wireless stations from communicating directly with one another or discovering local network resources on the same subnet. It ensures traffic from each client is routed strictly to the internet gateway.

Step-by-Step Solution

1
Identify the core problem described in the scenario
Connected guest devices are able to see and communicate with local network resources and other peer devices on the same wireless segment.
Standard SOHO or basic guest WLANs default to allowing peer-to-peer communication across the layer-2 network broadcast domain.
2
Evaluate wireless security mechanisms for peer segregation
Wireless Client Isolation restricts each connected endpoint so it can only talk to the default gateway (router), blocking intra-SSID client-to-client communication.
This guarantees guest devices remain isolated from internal network shares, printers, and neighboring endpoints.
3
Distinguish between authentication mechanisms and traffic management
Options like 802.1X/RADIUS or MAC filtering govern who can connect, but do not prevent connected devices on the same subnet from broadcasting to each other.
Authentication controls identity verification, whereas client isolation controls packet forwarding boundaries.

Key Concept

Wireless Client Isolation (AP Isolation)
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic