100-160 Question 87
Select 3You are tasked with setting up a secure wireless network for a small office/home office (SoHo). Which of the following best practices should you implement to ensure the network is secure?
- A
Enable WPA3 encryption for the wireless network.
- B
Disable the SSID broadcast to hide the network from unauthorized users.
- C
Use a default router username and password provided by the manufacturer.
- D
Enable a guest network for visitors and restrict its access to internal resources.
- E
Use MAC address filtering to allow only specific devices to connect to the network.
Show answer and explanation
Correct answers: A, D, E
Explanation
To set up a secure wireless SoHo network, it is essential to use strong encryption like WPA3, restrict access using features like guest networks and MAC address filtering, and avoid common security pitfalls such as using default credentials or relying solely on SSID hiding for security. These measures collectively enhance the network's security posture.
- A. Correct.
WPA3 encryption is the most secure wireless encryption standard available and provides robust protection against unauthorized access.
- B. Incorrect.
Disabling SSID broadcast does not significantly enhance security as attackers can still discover hidden networks using specialized tools.
- C. Incorrect.
Using default credentials poses a significant security risk because they are easily accessible and widely known. Always change them to unique, strong credentials.
- D. Correct.
A guest network allows visitors to connect without exposing the main network. Restricting guest access prevents unauthorized access to sensitive internal resources.
- E. Correct.
MAC address filtering adds an extra layer of security by limiting which devices can connect, though it should be used in conjunction with other security measures.