200-301 exam dumps

200-301 practice question 130 of 506

Cisco Certified Network Associate. Free level, Cisco. Free question with the correct answer and a full explanation.

200-301 Question 130

Select 3

A network administrator is configuring a wireless network for a small office. They want to ensure that only authorized users can access the wireless network and that the SSID is not easily discoverable by unauthorized users. Which of the following actions should the administrator take?

  1. A

    Enable WPA3 encryption for the wireless network

  2. B

    Disable SSID broadcasting

  3. C

    Use a strong, unique SSID name

  4. D

    Configure a MAC address filter

  5. E

    Set the SSID to a default name like 'Linksys' or 'Netgear'

Show answer and explanation

Correct answers: A, B, C

Explanation

To secure a wireless network, the administrator should enable strong encryption like WPA3, disable SSID broadcasting to make the network less discoverable, and use a unique SSID name to prevent attackers from targeting the network based on default or common names. While MAC address filtering can add a layer of security, it is not reliable enough to be a primary measure. Using a default SSID should always be avoided as it can make the network more vulnerable to attacks.

  • A. Correct.

    Enabling WPA3 encryption ensures that only authorized users with the correct credentials can connect to the wireless network. This is an essential security measure.

  • B. Correct.

    Disabling SSID broadcasting makes the wireless network less visible to unauthorized users by hiding its name from casual scanning. However, it is not foolproof and should be combined with other security measures.

  • C. Correct.

    Using a strong, unique SSID name helps minimize the likelihood of the wireless network being targeted by attackers using default SSIDs.

  • D. Incorrect.

    While configuring a MAC address filter can provide an additional layer of security, it is not foolproof as MAC addresses can be easily spoofed by attackers.

  • E. Incorrect.

    Using a default SSID name like 'Linksys' or 'Netgear' is not recommended because it makes the network more identifiable and may indicate a lack of proper security configuration.

Timed practice exam

Take a 200-301 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam