312-50V12 Question #197: Real Exam Question with Answer & Explanation

Question

As a junior security analyst for a small business, you are tasked with setting up the company's first wireless network. The company wants to ensure the network is secure from potential attacks. Given that the company's workforce is relatively small and the need for simplicity in managing network security, which of the following measures would you consider a priority to protect the network?

Options

• AHide the network SSID
• BEnable WPA2 or WPA3 encryption on the wireless router
• CImplement a MAC address whitelist
• DEstablish a regular schedule for changing the network password

Explanation

The question asks for the priority security measure for a small business's first wireless network, emphasizing simplicity and robust protection. Enabling WPA2 or WPA3 encryption is the most critical and foundational step.

Common mistakes.

• A. Hiding the network SSID offers minimal security as it can be easily discovered by common network scanning tools and does not prevent access once an attacker knows the SSID.
• C. Implementing a MAC address whitelist is ineffective as a primary security measure because MAC addresses can be easily spoofed by attackers, allowing them to bypass this control.
• D. While regular password changes can be part of a security policy, it is not as high a priority or as fundamentally impactful as strong encryption and can lead to user inconvenience or weaker chosen passwords.

Concept tested. Wireless network encryption standards and best practices

Reference. https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines/wireless-security-policy

No community discussion yet for this question.