Why can't a returning remote user access company resources on wireless?
Short answer
C The NAC appliance has labeled the laptop as non-complaint.
Question
Key Takeaways
The exam tests whether you understand that NAC checks more than just patches, so a laptop can still be non-compliant and be quarantined to the guest network; the trap is assuming up-to-date software automatically makes it compliant.
A returning remote user who can connect to the guest network but cannot reach company resources is most likely restricted by a non-compliant NAC assessment. The community overwhelmingly agrees that NAC enforcement is the cause, since the user has already confirmed patches and software are up to date.
Common mistake: B (wireless passphrase cycled) is the most common wrong answer because it seems plausible after a long absence, but the user is already connected to the guest network, so the corporate SSID password is not the blocker—limited internal access points to NAC enforcement.
Expert Analysis
Why the Answer Is Correct
C is correct because a NAC appliance enforces security compliance policies and can place devices into a quarantine or guest VLAN if it deems them non-compliant. The user’s ability to connect to the guest network but not reach company resources is a classic NAC quarantine scenario. Up-to-date patches and software do not guarantee compliance, as NAC may also check for antivirus definitions, disk encryption, or recent policy updates.
Why the Other Options Are Wrong
A (laptop drivers) would cause general wireless connectivity issues, not a situation where the user can actively join the guest network. B (passphrase cycled) would prevent authentication to the corporate SSID, but the user is already on the guest network, so the passphrase is irrelevant. D (WAP transmit power) would cause a weak signal or dropped authentication, not the specific symptom of being limited to a guest network while unable to access internal resources.
Community Comment Notes
Multiple commenters correctly pointed out that a wrong passphrase would prohibit any connection, making B unlikely. Others shared real-world experience that NAC-based quarantine is a frequent occurrence, especially for devices that have been away for an extended period and may have missed compliance updates. One comment highlighted that the guest network is a fallback for non-compliant devices, which directly supports the correct answer.
Official Reference
https://www.comptia.org/certifications/network
This link opens the official vendor documentation in a new tab.
Exam Strategy
When you see a user who can connect to a guest network but cannot reach internal resources, immediately think of NAC or VLAN isolation rather than Wi-Fi authentication issues. Focus on the distinction between being connected to a network and being authorized to access internal systems.
Community Votes
80% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 12 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 12
-
Cloud1128 👍 5 Answered Cbro is non compliant now because he was away for so long
-
YorkieTeaTime 👍 4I don't see how it could be the NAC appliance labeling the laptop when it says in the question that the user already made sure their patches were up to date. I'd think that if they spent a lot of time away from the site, the office network may have upgraded their wireless infrastructure and their laptop drivers need to be updated to match the wifi config?
-
interestingtimes 👍 3 Answered CThe user wouldn't be able to connect at all if they had the wrong password guys. It's definitely C I see it all the time at work.
-
K1lroy 👍 2 Answered BI think its B because why would the user connect to the guest network ? Probably as a fallback that his password didnt work anymore so it connected there instead, of course he cant reach company resources over that
-
bdemps98 👍 2 Answered BLaptop should be in compliance if all patches are applied. My guess is B cause its been an extended period of time and it rolled over to the guest network.
Show 7 more comments
-
Ty13 👍 2 Answered CC. If the NAC says their device is out of compliance then it will absolutely restrict them.
-
interestingtimes 👍 2 Answered CIf it was B then it wouldn't connect at all. In most cases it would be the same for A.
-
JB1705 👍 2 Answered Cthis always happens in our office. Answer is C
-
Dadadagreat 👍 2C NAC is the correct answer
-
Nolanm6 👍 2 Answered CKeyword "limited access"
-
Dadadagreat 👍 2Network Access Control
-
fartphilosopher89 👍 1 Answered AIt is A
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.