Question

Difficulty: MediumWireless Security and Authentication

A network technician is setting up a wireless network for guests in a company's main reception area. Corporate security policy specifies that guest users should not be issued individual Active Directory credentials or a shared pre-shared key, but must be presented with a web page to accept an Acceptable Use Policy (AUP) before receiving network access. Which of the following wireless security configurations best meets these requirements?

  1. Captive portalAnswer
  2. B
    WPA3-Enterprise with 802.1X
  3. C
    Wi-Fi Protected Setup (WPS)
  4. D
    WPA2-Personal with TKIP

Answer

Captive portal
A captive portal intercepts client HTTP/HTTPS requests and redirects users to a web page where they must accept an Acceptable Use Policy (AUP) or complete basic web-based authentication before being permitted onto the external network. This satisfies the requirement to grant guest access without distributing pre-shared keys or Active Directory accounts.

Step-by-Step Solution

1
Analyze the guest wireless access requirements.
Guests must be onboarded without domain credentials or shared passkeys, but must accept an Acceptable Use Policy (AUP).
Guest networks require simplified access while ensuring users agree to terms of service prior to network access.
2
Evaluate wireless authentication methods against requirements.
A captive portal redirects initial web traffic to an onboarding page presenting the AUP before granting internet access.
Captive portals fulfill web-based policy acceptance requirements without requiring account creation or pre-shared keys.

Key Concept

Captive Portal and Guest Authentication
Rate this question