H12-725: HCIP-Security V4.0

Portal authentication is appropriate for guest networks because it provides a web-based sign-in flow that can apply access controls without requiring supplicant configuration on each guest device. MAC address–based approaches are weaker because a MAC address can be spoofed, while 802.1X is typically better suited to managed users and devices.