ITPEC IP October 2025 Question 40
In a wireless LAN router, which of the following is the appropriate explanation of a function that is set up for devices brought in from external locations and is called a “guest port” or a “guest SSID” or other such names?
Explanation
A device can connect only to the Internet, not to the internal network — a guest SSID keeps visitors' devices away from internal PCs and servers.
The router offers a second SSID with its own password and places devices on it in a separate network that can reach the Internet but not the internal LAN; many routers also block traffic between guest devices. A device brought in from outside may carry malware and its security state is unknown, so it gets Internet access without being able to reach file servers or shared folders, and the internal network's password need not be handed out.
Answer (a)
Why not others:
- •(b) — checking a device for malware and admitting only safe ones is a quarantine network (network access control), a separate system
- •(c) — connecting by pressing buttons on the device and the router is WPS (push-button configuration)
- •(d) — accepting a device whose SSID field is blank is the ANY connection, a setting usually disabled so unknown devices cannot join; it is not a guest function
Key rule: Separate networks by trust: visitors' devices get Internet-only access on their own SSID, and internal resources stay reachable only from the internal LAN.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.