220-1101 Question 141
Single answer2.6 Given a scenario, configure basic wired/wireless small office/home office (SOHO) networks.A technician is setting up Wi-Fi for a small accounting office that has a single wireless router and several employee laptops, phones, and a wireless printer. The office owner wants the network to be easy to manage, secure against casual unauthorized access, and compatible with older devices that do not support WPA3. Which configuration should the technician implement?
- A
Enable WPA2-Personal with AES, change the default SSID and admin password, and disable WPS
- B
Enable WEP with MAC filtering so legacy devices can connect more easily
- C
Enable WPA3-Personal only and keep WPS enabled for simple device onboarding
- D
Leave the router open, hide the SSID, and rely on the firewall to prevent wireless access
Show answer and explanation
Correct answer: A
Explanation
For a small office/home office network, the technician should balance security, usability, and compatibility. In this scenario, WPA2-Personal with AES is the most appropriate wireless security configuration because it is broadly supported and still considered acceptable for SOHO environments when WPA3 cannot be used universally. Additional best practices include changing default administrative credentials, using a non-default SSID, and disabling WPS. CompTIA A+ Core 1 objective 2.6 expects candidates to understand common SOHO wireless settings and security choices, including WPA2, WPA3, SSID configuration, and basic router hardening. Industry guidance from router vendors and general wireless security best practices also discourages WEP and open networks and treats hidden SSIDs and MAC filtering as weak supplemental measures rather than primary security controls.
- A. Correct.
This is the best choice for a SOHO environment with mixed device compatibility requirements. WPA2-Personal using AES is the standard secure option when older devices may not support WPA3. Changing the default SSID and the router's default administrative password follows basic hardening best practices. Disabling WPS is also recommended because WPS can introduce security weaknesses and is not considered a strong protection method.
- B. Incorrect.
This is incorrect because WEP is deprecated and insecure. It can be cracked relatively quickly with readily available tools, so it should not be used for protecting a business wireless network. MAC filtering may add minor administrative control, but it is not a substitute for strong encryption because MAC addresses can be spoofed.
- C. Incorrect.
This is incorrect because WPA3-Personal only may prevent older devices from connecting, which conflicts with the office requirement for compatibility. Keeping WPS enabled is also a poor security decision. Although WPA3 is stronger than WPA2, the scenario specifically requires support for older devices that do not support WPA3.
- D. Incorrect.
This is incorrect because an open wireless network provides no encryption or authentication for client connections. Hiding the SSID does not provide meaningful security, since the network can still be discovered through wireless analysis tools. A firewall helps control traffic but does not replace wireless authentication and encryption.