100-160 exam dumps

100-160 practice question 94 of 265

Cisco Certified Support Technician (CCST) Cybersecurity. Associate level, Cisco. Free question with the correct answer and a full explanation.

100-160 Question 94

Select 3

A company is setting up a wireless network for its employees and wants to enhance its security. They decide to use both MAC address filtering and a strong encryption protocol, while also ensuring the SSID is not easily discoverable by external parties. Which combination of actions will best meet their security requirements?

  1. A

    Enable WPA3 encryption on the wireless router.

  2. B

    Use WEP encryption to secure the wireless network.

  3. C

    Disable SSID broadcast to hide the network from being easily discovered.

  4. D

    Implement MAC address filtering to allow only approved devices to connect.

  5. E

    Use a default SSID provided by the router manufacturer.

Show answer and explanation

Correct answers: A, C, D

Explanation

To secure a wireless network, it is essential to use a strong encryption standard like WPA3, as weaker protocols like WEP are easily compromised. Disabling SSID broadcast helps make the network less discoverable, and MAC address filtering adds an additional authentication layer. Avoid using default SSIDs as they can make the network more vulnerable to attacks. These combined measures provide a robust security posture for the network.

  • A. Correct.

    WPA3 is the latest and most secure encryption protocol available for wireless networks, making it the best choice for enhanced security.

  • B. Incorrect.

    WEP is an outdated and insecure encryption standard that is vulnerable to attacks, so it should not be used.

  • C. Correct.

    Disabling SSID broadcast makes the network less visible to casual attackers, adding an additional layer of obscurity.

  • D. Correct.

    MAC address filtering restricts access to only approved devices, which improves security by limiting who can connect to the network.

  • E. Incorrect.

    Using a default SSID can make the network more identifiable and susceptible to targeted attacks, so it is not recommended.

Timed practice exam

Take a 100-160 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam