IPA IP 2022 Question 68
A question IPA Japan published in 令和4年度 ITパスポート試験 公開問題 問68, translated into English. ITPEC is based on the same exams.
Same question on ITPEC: Oct 2025 Q40
In a wireless LAN router, which of the following is the appropriate explanation of a function that is set up for devices brought in from external locations and is called a “guest port” or a “guest SSID” or other such names?
Explanation
A device can connect only to the Internet, not to the internal network — a guest SSID keeps visitors' devices away from internal PCs and servers.
The router offers a second SSID with its own password and places devices on it in a separate network that can reach the Internet but not the internal LAN; many routers also block traffic between guest devices. A device brought in from outside may carry malware and its security state is unknown, so it gets Internet access without being able to reach file servers or shared folders, and the internal network's password need not be handed out.
Answer (a)
Why not others:
- •(b) — checking a device for malware and admitting only safe ones is a quarantine network (network access control), a separate system
- •(c) — connecting by pressing buttons on the device and the router is WPS (push-button configuration)
- •(d) — accepting a device whose SSID field is blank is the ANY connection, a setting usually disabled so unknown devices cannot join; it is not a guest function
Key rule: Separate networks by trust: visitors' devices get Internet-only access on their own SSID, and internal resources stay reachable only from the internal LAN.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.