Question

the owner of a hotel has contracted with you to implement a wireless network to provide internet access for guests. the owner has asked that you implement security controls so that only paying guests are allowed to use the wireless network.

the owner wants guests to be presented with a login page when they initially connect to the wireless network. after entering a code provided by the concierge at check-in, guests should then be allowed full access to the internet. if a user does not provide the correct code, he or she should not be allowed to access the internet.

what should you do?

a implement pre-shared key authentication.
b implement 802.1x authentication using a radius server.
c implement mac address filtering.
d implement a captive portal.

Explanation:

Analyze the requirements

The hotel owner wants a wireless network where guests are presented with a login page upon initial connection. They must enter a code provided at check-in to gain internet access. If the code is incorrect, access is denied.

Evaluate option A

Pre-shared key (PSK) authentication requires users to enter a passphrase before connecting to the wireless network. It does not present a web-based login page after connection.

Evaluate option B

802.1x authentication with a RADIUS server is typically used for enterprise environments requiring individual user credentials (username/password or certificates). It is overly complex for hotel guests and does not natively present a simple web login page for entering a check-in code.

Evaluate option C

MAC address filtering restricts network access based on physical hardware addresses. It does not present a login page to the user and is difficult to manage for a constantly changing guest population.

Evaluate option D

A captive portal is a web page that is displayed to newly connected wireless users before they are granted broader access to network resources. It is commonly used in hotels to present a login screen, terms of service, or a field to enter a code provided by the concierge. This perfectly matches the requirements.

Answer:

• (A) Implement pre-shared key authentication.
• (B) Implement 802.1x authentication using a RADIUS server.
• (C) Implement MAC address filtering.
• (D) Implement a captive portal. (Correct answer)