A network administrator is designing a wireless architecture for a company branch office. The goal is to provide visitors with internet access while preventing them from accessing sensitive internal servers and local network resources. Which of the following controls should the administrator implement to achieve secure network segmentation? (Select TWO.)
- Place visitor traffic on a dedicated guest VLAN isolated with Access Control Lists (ACLs) that restrict access to internal IP ranges.Answer
- Deploy the guest wireless gateway in a perimeter DMZ segment configured to route guest traffic directly to the internet gateway.Answer
- CConnect visitor devices directly to the internal subnet and rely on host-based endpoint firewalls on corporate servers to block guest connections.
- DAllow visitors onto the internal network architecture under the assumption that external perimeter firewalls will inherently secure internal communications.
Answer
The correct controls are assigning visitor traffic to a dedicated guest VLAN with outbound ACLs and deploying the guest wireless gateway within a perimeter DMZ segment.
Isolating untrusted devices via a dedicated guest VLAN with strict ACLs and routing guest traffic through a perimeter DMZ segment ensures that guest packets cannot reach internal corporate resources while maintaining internet access.
Step-by-Step Solution
Key Concept
Secure Network Design and Segmentation
Estimated Time:1m 0s