A visitor arrives at a company's reception desk. The receptionist provides the visitor a Wi-Fi SSID and password for guest access. Before connecting, the visitor's device displays a browser-based landing page asking them to agree to an Acceptable Use Policy (AUP).
What is the PRIMARY legal and security purpose of requiring the visitor to click 'Accept' on the captive portal AUP before granting internet access?
- A.To assign the visitor a unique IP address for NAT logging purposes, which the portal now derives from the MAC seen in the association request
- B.To establish informed consent and create a legal record that the visitor acknowledged acceptable use terms, limiting organizational liability
- C.To authenticate the visitor with their corporate credentials via RADIUS before granting access
- D.To scan the visitor's device for malware before allowing it onto the network segment; certificate pinning lets a server accept any client certificate signed within the last year
Why B is correct