In onboarding, which access is commonly controlled by device permission levels?

• A. Access to certain portions of the network
• B. Access to the entire internet
• C. Access to no network
• D. Access to the guest network only

Answer: (D)

Onboarding uses device permission levels to keep newly connected devices restricted until they prove they’re trustworthy. The typical approach is to place those devices on a guest network, which provides internet access but isolates internal resources. This minimizes risk while still allowing the device to download updates, enroll in management, and receive policies. Once the device passes posture checks and compliance, its access can be elevated to the appropriate internal segments. The other options don’t fit as well: giving broad internet access bypasses internal controls; granting no network would prevent onboarding; and granting access to only certain internal portions is possible in some setups, but the common default during onboarding is guest network access to keep things isolated.