100-160 Question 92
Select 2A network administrator has configured a wireless network with WPA3 encryption, disabled SSID broadcasting, and implemented MAC address filtering. Despite these measures, unauthorized devices still occasionally connect to the network. Which of the following changes could further enhance the network's security?
- A
Enable WPA2 encryption instead of WPA3
- B
Use a strong, complex pre-shared key for WPA3
- C
Implement 802.1X authentication with RADIUS
- D
Disable MAC address filtering as it is not secure
- E
Enable SSID broadcasting to prevent SSID guessing attacks
Show answer and explanation
Correct answers: B, C
Explanation
WPA3 encryption is already a strong security measure, but its effectiveness depends on the use of a strong pre-shared key. Adding 802.1X authentication with RADIUS further strengthens security by requiring users to authenticate through a server, providing an additional layer of protection. Disabling MAC filtering or enabling SSID broadcasting would not enhance security and could potentially increase the network's vulnerability.
- A. Incorrect.
WPA2 is less secure than WPA3, so enabling WPA2 would reduce the overall security of the network.
- B. Correct.
Using a strong, complex pre-shared key for WPA3 ensures that even if an attacker obtains the SSID, they still cannot connect without the key.
- C. Correct.
802.1X authentication with RADIUS adds an additional layer of security by requiring users to authenticate through a centralized server, making unauthorized access more difficult.
- D. Incorrect.
Disabling MAC address filtering is not a solution to enhance security. While MAC filtering can be bypassed, it does provide an additional layer of defense and should remain enabled in this context.
- E. Incorrect.
Enabling SSID broadcasting does not enhance security. It only makes the network more discoverable, which could increase the likelihood of attack.