You have just set up a wireless network for customers at a coffee shop. Which of the following are good security measures to implement? Each correct answer represents a complete solution. Choose two.

Question

Options

• AMAC filtering the router
• BNot broadcasting SSID
• CUsing WEP encryption
• DUsing WPA encryption

• A
  11% (4)
• B
  19% (7)
• C
  69% (25)

Explanation

There is an error in the provided answer key - C and D cannot both be correct, as WEP (C) is a notoriously broken encryption standard that was cracked in the early 2000s and offers virtually no real security. The actual correct answers are B and D.

Why B and D are correct: Not broadcasting the SSID (B) adds a layer of obscurity that discourages casual attackers from seeing the network, and WPA encryption (D) provides robust, modern protection for wireless traffic - both are practical, recognized security measures for a public-facing network.

Why A and C are wrong: MAC filtering (A) is impractical for a coffee shop because every new customer device would need to be manually added, and MAC addresses can be spoofed anyway. WEP (C) uses a fatally flawed RC4 implementation that can be cracked in minutes with freely available tools - no modern security guidance recommends it.

Memory tip: Think "WEP = Weak, Easily Penetrated." On exams, any question asking about good wireless security should lead you to WPA/WPA2/WPA3 first. SSID hiding is a minor but accepted supplementary measure - not a replacement for encryption.

Note: If this question appears on a CompTIA A+ or similar exam and the official answer key says C and D, flag it - this appears to be an outdated or erroneous question. Real-world and current exam objectives treat WEP as insecure.

No community discussion yet for this question.