Cert Master

KT-NET ARP spoofing

An attacker on guest Wi-Fi intercepts traffic. BEST network segmentation fix?

Multiple choice — select one answer

Answer choices

  1. a. Disable WPA2 on guest, without security or identity team coordination per policy.
  2. b. Client isolation and separate VLAN without route to corporate resources
  3. c. Share admin passwords on guest SSID, without security or identity team coordination per policy.
  4. d. Merge guest and corp VLANs, without security or identity team coordination per policy.

Architectural breakdown & explanation

Guest isolation limits MITM impact on corporate assets.

Correct answer(s): b. Client isolation and separate VLAN without route to corporate resources

Exam domain: ARP spoofing (17% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Network Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications