Why can't a returning remote user access company resources on wireless?

A user returns to the office after working remotely for an extended period. The user is reporting limited access to the office wireless network and the inability to reach company resources on the network. The user connected to the guest network, ensured all patches were applied, and checked to make sure software was up to date. Which of the following is most likely the cause of the issue?

  1. The laptop drivers need to be updated to support a new wireless infrastructure.
  2. The wireless passphrase has been cycled and needs to be updated.
  3. The NAC appliance has labeled the laptop as non-complaint. Source Reference Answer
  4. The WAP transmit power is too low and cannot complete user authentication.

Community Votes

C
80%
B
20%

80% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The exam tests whether you understand that NAC checks more than just patches, so a laptop can still be non-compliant and be quarantined to the guest network; the trap is assuming up-to-date software automatically makes it compliant.

A returning remote user who can connect to the guest network but cannot reach company resources is most likely restricted by a non-compliant NAC assessment. The community overwhelmingly agrees that NAC enforcement is the cause, since the user has already confirmed patches and software are up to date.

B (wireless passphrase cycled) is the most common wrong answer because it seems plausible after a long absence, but the user is already connected to the guest network, so the corporate SSID password is not the blocker—limited internal access points to NAC enforcement.

Community Discussion (12 comments)

Cloud1128 👍 5 Selected: C
bro is non compliant now because he was away for so long
interestingtimes 👍 3 Selected: C
The user wouldn't be able to connect at all if they had the wrong password guys. It's definitely C I see it all the time at work.
interestingtimes 👍 2 Selected: C
If it was B then it wouldn't connect at all. In most cases it would be the same for A.
Ty13 👍 2 Selected: C
C. If the NAC says their device is out of compliance then it will absolutely restrict them.
Dadadagreat 👍 2
Network Access Control
Dadadagreat 👍 2
C NAC is the correct answer
Nolanm6 👍 2 Selected: C
Keyword "limited access"
JB1705 👍 2 Selected: C
this always happens in our office. Answer is C
bdemps98 👍 2 Selected: B
Laptop should be in compliance if all patches are applied. My guess is B cause its been an extended period of time and it rolled over to the guest network.
K1lroy 👍 2 Selected: B
I think its B because why would the user connect to the guest network ? Probably as a fallback that his password didnt work anymore so it connected there instead, of course he cant reach company resources over that
fartphilosopher89 👍 1 Selected: A
It is A
YorkieTeaTime 👍 4
I don't see how it could be the NAC appliance labeling the laptop when it says in the question that the user already made sure their patches were up to date. I'd think that if they spent a lot of time away from the site, the office network may have upgraded their wireless infrastructure and their laptop drivers need to be updated to match the wifi config?

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

C is correct because a NAC appliance enforces security compliance policies and can place devices into a quarantine or guest VLAN if it deems them non-compliant. The user’s ability to connect to the guest network but not reach company resources is a classic NAC quarantine scenario. Up-to-date patches and software do not guarantee compliance, as NAC may also check for antivirus definitions, disk encryption, or recent policy updates.

Why the Other Options Are Wrong

A (laptop drivers) would cause general wireless connectivity issues, not a situation where the user can actively join the guest network. B (passphrase cycled) would prevent authentication to the corporate SSID, but the user is already on the guest network, so the passphrase is irrelevant. D (WAP transmit power) would cause a weak signal or dropped authentication, not the specific symptom of being limited to a guest network while unable to access internal resources.

Community Comment Notes

Multiple commenters correctly pointed out that a wrong passphrase would prohibit any connection, making B unlikely. Others shared real-world experience that NAC-based quarantine is a frequent occurrence, especially for devices that have been away for an extended period and may have missed compliance updates. One comment highlighted that the guest network is a fallback for non-compliant devices, which directly supports the correct answer.

Official Reference

Exam Strategy

When you see a user who can connect to a guest network but cannot reach internal resources, immediately think of NAC or VLAN isolation rather than Wi-Fi authentication issues. Focus on the distinction between being connected to a network and being authorized to access internal systems.

Related Analysis

← Back to N10-008 Study Guide