nerdexam
CompTIA

220-802 · Question #548

An administrator sets up a wireless device that they will need to manage across the Internet. Which of the following security measures would BEST prevent unauthorized access to the device from the…

The correct answer is B. Change the default username and password. Changing the default username and password on a remotely managed wireless device is the most critical step to prevent unauthorized access, since default credentials are publicly documented and trivially exploited.

Networking

Question

An administrator sets up a wireless device that they will need to manage across the Internet. Which of the following security measures would BEST prevent unauthorized access to the device from the Internet?

Options

  • ASet the channels to wireless 802.11n only
  • BChange the default username and password
  • CEnable the wireless AP's MAC filtering
  • DEnable the wireless AP's WPA2 security

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    72% (13)
  • C
    6% (1)
  • D
    17% (3)

Why each option

Changing the default username and password on a remotely managed wireless device is the most critical step to prevent unauthorized access, since default credentials are publicly documented and trivially exploited.

ASet the channels to wireless 802.11n only

Setting the wireless channel to 802.11n only affects the radio protocol used by wireless clients and has no effect on Internet-facing management access security.

BChange the default username and passwordCorrect

Most wireless routers and APs ship with well-known default credentials (e.g., admin/admin or admin/password) that are published in vendor manuals and online databases. An attacker accessing the management interface from the Internet only needs these defaults to gain full control. Changing the credentials to a strong, unique combination eliminates this publicly known attack vector and is the foundational security step for any internet-facing device.

CEnable the wireless AP's MAC filtering

MAC filtering applies only to wireless client associations on the local network and does not protect the device's management interface when accessed over the Internet.

DEnable the wireless AP's WPA2 security

WPA2 secures the over-the-air wireless connection between clients and the AP, but it does not protect the device's web-based management interface from Internet-based attacks.

Concept tested: Changing default credentials on network devices

Source: https://www.cisa.gov/news-events/alerts/2018/09/13/hidden-cobra-north-koreas-continued-use-malicious-cyber-activity

Topics

#wireless security#default credentials#unauthorized access#remote management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 220-802 Practice