312-50V13 · Question #363
When configuring wireless on his home router, Javik disables SSID broadcast. He leaves authentication "open" but sets the SSID to a 32-character string of random letters and numbers. What is an…
The correct answer is C. It is still possible for a hacker to connect to the network after sniffing the SSID from a successful. Disabling SSID broadcast offers minimal security, as the SSID can still be captured from network traffic, and open authentication leaves the network completely unprotected once the SSID is known.
Question
Options
- ASince the SSID is required in order to connect, the 32-character string is sufficient to prevent
- BDisabling SSID broadcast prevents 802.11 beacons from being transmitted from the access point,
- CIt is still possible for a hacker to connect to the network after sniffing the SSID from a successful
- DJavik's router is still vulnerable to wireless hacking attempts because the SSID broadcast setting
How the community answered
(58 responses)- A3% (2)
- B12% (7)
- C79% (46)
- D5% (3)
Why each option
Disabling SSID broadcast offers minimal security, as the SSID can still be captured from network traffic, and open authentication leaves the network completely unprotected once the SSID is known.
While the SSID is required to connect, relying solely on a hidden SSID, even a long one, is insufficient security when authentication is open, as the SSID can be discovered.
Disabling SSID broadcast does prevent 802.11 beacons from publicly advertising the SSID, but it does not prevent all transmissions of the SSID within other Wi-Fi management frames.
Even with SSID broadcast disabled, the SSID is still transmitted in management frames (like probe requests and association requests) between an access point and connected clients, allowing an attacker to sniff the SSID and then easily connect due to open authentication.
The statement that Javik's router is still vulnerable is true, but the reasoning provided in option C (sniffing the SSID and connecting due to open authentication) is a more accurate and direct explanation of the specific vulnerability in this scenario than the broad statement in D.
Concept tested: Wireless network security best practices
Source: https://learn.microsoft.com/en-us/windows/security/information-protection/wireless-security/wireless-security-best-practices
Topics
Community Discussion
No community discussion yet for this question.