問68
頻出度★★★
無線 LAN ルータにおいて, 外部から持ち込まれた端末用に設けられた, “ゲストポート” や “ゲスト SSID” などと呼ばれる機能によって実現できることの説明として, 適切なものはどれか。
令和4年度 ITパスポート試験 問68
テクノロジ系ネットワーク › ネットワーク方式
This question's explanation and your answers so far.
解説
問 68
- ア
正解 A guest SSID (guest port) is a dedicated wireless zone for connecting devices brought in from outside, such as visitors’ devices. A device connected to this zone cannot access internal network resources such as the company’s (or home’s) shared folders and printers; only the exit to the Internet is permitted. By thus separating (isolating) the internal network from visitors’ devices at the network level, it prevents devices of unknown origin from intruding into internal resources or spreading an infection to internal devices. Therefore, ア, which explains that it “does not allow the device to connect to the internal network, and only connects it to the Internet,” is correct.
Incorrectイ
Inspecting whether a device is infected with malware before connecting it and allowing only confirmed-safe devices is a function of a “quarantine network (quarantine system).” A guest SSID merely isolates devices and does not perform malware inspection.
Incorrectウ
Being able to complete the connection setup merely by pressing buttons on the device and the router is a function of “WPS (Wi-Fi Protected Setup),” a mechanism that simplifies entering the encryption key. It is a different thing from a guest SSID.
Incorrectエ
エ describes ANY connection (a function that connects to nearby access points with the SSID left blank or set to ANY), not the guest SSID function. ANY connection actually works unless the router is set to refuse it, so from a security standpoint it is something to block with ANY-connection refusal or SSID stealth.
ここがポイント
- Guest SSID / guest port = a network-separation feature that isolates visitors’ devices from the internal network and permits only Internet access.
- Distinguishing from similar features: malware inspection is the quarantine network, easy connection via button operation only is WPS, and connecting with a blank SSID is an ANY connection.
用語