To provide guest Internet access while preventing access to the cafe's internal network, which configuration is most appropriate?

To provide guest Internet access while preventing access to the cafe's internal network, which configuration is most appropriate?

• A. Captive portal
• B. MAC filtering
• C. Guest network
• D. Geofencing

Answer: (C)

Creating a separate guest network is the best way to give guests Internet access while keeping the cafe’s internal resources off-limits. This means offering a dedicated SSID (and usually a separate VLAN) that routes guest traffic to the Internet only, with firewall rules that block access to internal devices and services. If you want, you can layer in a captive portal on this network to require agreement or login before access, but the key idea is the isolation provided by a distinct guest network. MAC filtering isn’t reliable for real security and doesn’t provide proper network segmentation. Geofencing isn’t about access control for a network. A captive portal is a login mechanism, which can be used on the guest network, but without the dedicated guest network itself, guests could still reach internal resources.

Creating a separate guest network is the best way to give guests Internet access while keeping the cafe’s internal resources off-limits. This means offering a dedicated SSID (and usually a separate VLAN) that routes guest traffic to the Internet only, with firewall rules that block access to internal devices and services. If you want, you can layer in a captive portal on this network to require agreement or login before access, but the key idea is the isolation provided by a distinct guest network.

MAC filtering isn’t reliable for real security and doesn’t provide proper network segmentation. Geofencing isn’t about access control for a network. A captive portal is a login mechanism, which can be used on the guest network, but without the dedicated guest network itself, guests could still reach internal resources.