In a SOHO wireless network, which of the following prevents unauthorized users from accessing confidential data?

Reducing broadcast power limits range but does not prevent a nearby unauthorized user with a sensitive antenna from still capturing and reading unencrypted data.

Changing the SSID name is an obscurity measure only and does not provide any cryptographic protection for data.

Setting encryption (such as WPA2 or WPA3) on a SOHO wireless network encodes transmitted data so that even if an unauthorized user captures the packets, they cannot read the contents without the decryption key. This directly addresses confidentiality, which is the protection of data in transit.

MAC filtering can restrict which devices associate to the network but MAC addresses are easily spoofed and it does not protect the confidentiality of data on the wire.