312-50V12 · Question #205
As the lead security engineer for a retail corporation, you are assessing the security of the wireless networks in the company's stores. One of your main concerns is the potential for "Wardriving"…
The correct answer is D. Implement WPA3 encryption for the store's Wi-Fi network. Implementing WPA3 encryption is the most suitable measure to mitigate wardriving risks by significantly strengthening wireless network security against exploitation without hindering customer access.
Question
Options
- ALimit the range of the store's wireless signals
- BImplement MAC address filtering
- CDisable SSID broadcasting
- DImplement WPA3 encryption for the store's Wi-Fi network
How the community answered
(37 responses)- A3% (1)
- B11% (4)
- C3% (1)
- D84% (31)
Why each option
Implementing WPA3 encryption is the most suitable measure to mitigate wardriving risks by significantly strengthening wireless network security against exploitation without hindering customer access.
Limiting signal range primarily makes discovery from a distance harder but does not prevent discovery from closer proximity or enhance the security of the network against exploitation once discovered.
MAC address filtering is easily circumvented by MAC spoofing and is impractical for a customer-facing Wi-Fi network that requires frequent connections from various devices.
Disabling SSID broadcasting offers minimal security as the SSID can still be discovered by common tools and makes it more difficult for legitimate customers to connect, degrading user experience.
WPA3 encryption significantly enhances the security of the Wi-Fi network by providing stronger authentication and encryption protocols, such as Simultaneous Authentication of Equals (SAE), which makes it substantially more difficult for attackers to compromise the network through brute-force or offline dictionary attacks, even if the network is discovered via wardriving. This measure directly mitigates the vulnerability aspect of wardriving without negatively impacting the customer's ability to access the in-store Wi-Fi.
Concept tested: Wireless Network Security, WPA3 Encryption, Wardriving Mitigation
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/wpa3-security
Topics
Community Discussion
No community discussion yet for this question.