Valid CNX-001 Dumps shared by EduDump.com for Helping Passing CNX-001 Exam! EduDump.com now offer the newest CNX-001 exam dumps, the EduDump.com CNX-001 exam questions have been updated and answers have been corrected get the newest EduDump.com CNX-001 dumps with Test Engine here:
A network engineer is setting up guest access on a Wi-Fi network. After a recent network analysis, the engineer discovered that a user could access the guest network and attack the corporate network, since the networks share the same VLAN. Which of the following should the engineer do to prevent an attack like this one from happening?
Correct Answer: A
Comprehensive and Detailed Explanation From Exact Extract: Layer 2 client isolation ensures that devices connected to the same wireless network (such as a guest SSID) cannot communicate with each other or other VLANs. This prevents guest users from scanning or attacking internal devices. It's a fundamental security control for guest Wi-Fi access. Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide - under "Wireless Network Segmentation and Security": "Client isolation prevents peer-to-peer attacks over Wi-Fi by ensuring wireless clients cannot communicate with one another, a necessary control on shared guest networks." Other options: * B. MAC filtering is easy to spoof and hard to manage at scale. * C. Strong passwords improve access control but don't isolate guest traffic. * D. Captive portals add a registration layer but don't address VLAN or broadcast isolation.
