nerdexam
Cisco

350-401 · Question #432

Refer to the exhibit. An engineer is investigating why guest users are able to access other guest user devices when the users are connected to the customer guest WLAN. What action resolves this issue?

The correct answer is C. implement P2P blocking. P2P Blocking Explanation Why C is Correct: P2P (Peer-to-Peer) blocking is specifically designed to prevent wireless clients on the same WLAN from communicating directly with each other. When guest users can see and access other guest devices, it means lateral (client-to-client) t

Submitted by dimitri_ru· Mar 6, 2026Security

Question

Refer to the exhibit. An engineer is investigating why guest users are able to access other guest user devices when the users are connected to the customer guest WLAN. What action resolves this issue?

Exhibits

350-401 question #432 exhibit 1
350-401 question #432 exhibit 2

Options

  • Aimplement MFP client protection
  • Bimplement split tunneling
  • Cimplement P2P blocking
  • Dimplement Wi-Fi direct policy

How the community answered

(47 responses)
  • A
    13% (6)
  • B
    6% (3)
  • C
    79% (37)
  • D
    2% (1)

Explanation

P2P Blocking Explanation

Why C is Correct: P2P (Peer-to-Peer) blocking is specifically designed to prevent wireless clients on the same WLAN from communicating directly with each other. When guest users can see and access other guest devices, it means lateral (client-to-client) traffic is permitted - enabling P2P blocking on the guest WLAN forces all client traffic through the access point/controller, effectively isolating guests from one another.

Why the Distractors Are Wrong:

  • A (MFP Client Protection): Management Frame Protection is a security feature that protects against deauthentication/disassociation attacks and rogue devices - it does not control client-to-client communication.
  • B (Split Tunneling): Split tunneling determines whether traffic is routed through a VPN tunnel or exits locally - it has no relevance to blocking communication between wireless clients on the same SSID.
  • D (Wi-Fi Direct Policy): Wi-Fi Direct governs device-to-device connections outside of a traditional WLAN infrastructure (like Miracast or AirDrop) - it does not address standard guest client isolation.

Memory Tip: Think of P2P blocking = "No talking between peers" - whenever a question involves guests or users accessing each other's devices on the same WLAN, P2P blocking is your go-to isolation tool.

Topics

#Guest WLAN#Client Isolation#WLAN Security#P2P Blocking

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice