nerdexam
CompTIA

SY0-501 · Question #328

A network technician is setting up a segmented network that will utilize a separate ISP to provide wireless access to the public area for a company. Which of the following wireless security methods…

The correct answer is D. Captive portal. To provide basic accountability for public wireless access in a segmented network, a technician should implement a captive portal, which requires users to interact with a web page before gaining network access.

Submitted by khalil_dz· Mar 4, 2026Security architecture

Question

A network technician is setting up a segmented network that will utilize a separate ISP to provide wireless access to the public area for a company. Which of the following wireless security methods should the technician implement to provide basic accountability for access to the public network?

Options

  • APre-shared key
  • BEnterprise
  • CWi-Fi Protected setup
  • DCaptive portal

How the community answered

(56 responses)
  • A
    14% (8)
  • B
    4% (2)
  • C
    7% (4)
  • D
    75% (42)

Why each option

To provide basic accountability for public wireless access in a segmented network, a technician should implement a captive portal, which requires users to interact with a web page before gaining network access.

APre-shared key

A pre-shared key (PSK) provides encryption but offers no individual accountability, as all users share the same key without differentiating their access or actions.

BEnterprise

Enterprise (e.g., WPA2/3-Enterprise with 802.1X) provides strong individual accountability via unique user credentials but is typically overly complex and not considered 'basic' for public guest access.

CWi-Fi Protected setup

Wi-Fi Protected Setup (WPS) is a simplified method for connecting devices to a wireless network, but it does not provide any form of user accountability or authentication for network access.

DCaptive portalCorrect

A captive portal provides basic accountability for public networks by forcing users to agree to terms of service, provide an email, or log in via a simple mechanism before accessing the internet, allowing for logging of these interactions. This method is specifically designed for public Wi-Fi access where individual credential-based authentication might be too complex or unnecessary but some form of user acknowledgement is desired.

Concept tested: Public Wi-Fi security and user accountability

Source: https://www.cisco.com/c/en/us/products/wireless/what-is-captive-portal-how-it-works.html

Topics

#captive portal#wireless security#network segmentation#public network access

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice