Which countermeasure can mitigate the risk of a rogue access point?

Question

Options

• AImplementing WPS
• BConducting regular wireless network audits
• CUsing VPNs over wireless networks
• DDisabling DHCP on the router

• A
  4% (1)
• B
  79% (19)
• C
  13% (3)
• D
  4% (1)

Explanation

Regular wireless network audits (B) directly detect rogue access points by scanning for unauthorized devices broadcasting on your network - you can't remove what you haven't found, making detection the foundational countermeasure.

Why the distractors fail:

• A (WPS): Wi-Fi Protected Setup actually increases attack surface through its PIN vulnerability and doesn't help identify rogue APs at all.
• C (VPNs): A VPN protects data in transit but does nothing to prevent a rogue AP from existing or attracting unsuspecting users to connect to it.
• D (Disabling DHCP): A rogue AP typically runs its own DHCP server, so disabling DHCP on your legitimate router has no effect on the attacker's device.

Memory tip: Think "you can't fight what you can't see" - audits = awareness, and awareness is always the first step in security defense. If a question asks about rogue APs, look for the answer that involves discovery or monitoring.

No community discussion yet for this question.