100-160 Question 93
Select 3You are tasked with configuring a small office wireless network to enhance security. The company wants to prevent unauthorized devices from connecting, ensure data confidentiality, and avoid broadcasting the network name to the public. Which of the following measures should you implement?
- A
Enable MAC address filtering
- B
Use WPA3 encryption for the wireless network
- C
Disable SSID broadcasting
- D
Enable WEP encryption instead of WPA2 or WPA3
- E
Set the SSID to a default name like 'Linksys'
Show answer and explanation
Correct answers: A, B, C
Explanation
To secure the wireless network, you should enable MAC address filtering to restrict access to authorized devices, use WPA3 encryption to ensure data confidentiality, and disable SSID broadcasting to reduce visibility to unauthorized users. Avoid using outdated encryption methods like WEP and default SSIDs, as they pose significant security risks.
- A. Correct.
Enabling MAC address filtering helps restrict access to the network by allowing only pre-approved devices based on their MAC addresses. However, it should not be solely relied upon as it's susceptible to spoofing.
- B. Correct.
WPA3 encryption provides strong security by ensuring data confidentiality and protection against brute-force attacks. It is a modern encryption standard suitable for securing wireless networks.
- C. Correct.
Disabling SSID broadcasting hides the network name, making it less visible to casual users. However, determined attackers with proper tools can still discover hidden SSIDs.
- D. Incorrect.
WEP encryption is outdated and insecure due to well-known vulnerabilities. It should not be used in modern networks, as it can be easily compromised.
- E. Incorrect.
Using a default SSID like 'Linksys' makes the network more vulnerable to attacks, as attackers often target networks with default settings. Custom SSIDs are recommended.