A visitor arrives at a company's reception desk. The receptionist provides the visitor a Wi-Fi SSID and password for guest access. Before connecting, the visitor's device displays a browser-based landing page asking them to agree to an Acceptable Use Policy (AUP).
What is the PRIMARY legal and security purpose of requiring the visitor to click 'Accept' on the captive portal AUP before granting internet access?
- A.To establish informed consent and create a legal record that the visitor acknowledged acceptable use terms, limiting organizational liability
- B.To authenticate the visitor with their corporate credentials via RADIUS before granting access
- C.To scan the visitor's device for malware before allowing it onto the network segment
- D.To assign the visitor a unique IP address for NAT logging purposes
Why A is correct
The captive portal AUP creates an informed-consent record: the visitor explicitly acknowledges the organization's usage terms, which limits the organization's liability if the visitor uses the network for prohibited activities. This is not corporate credential authentication - guests do not have RADIUS accounts. Captive portals do not perform malware scanning (that would require a NAC/posture agent). IP assignment happens via DHCP automatically regardless of AUP acceptance. Many organizations also use the AUP page to display a legal banner warning that activity may be monitored, satisfying additional legal requirements.
Know someone studying for Network Fundamentals? Send them this one.