CWNA-109 · Question #10
Lynne runs a small hotel, and as a value added service for his customers he has implemented a Wi-Fi hot-spot. Lynne has read news articles about how hackers wait at hot-spots trying to take…
The correct answer is A. Enable station-to-station traffic blocking by the access points in the hotel. In a public Wi-Fi hotspot, like the one Lynne runs in his hotel, ensuring customer security against active attacks is crucial. Active attacks involve unauthorized access, eavesdropping, or manipulation of the network traffic. To mitigate such threats, an effective and practical…
Question
Lynne runs a small hotel, and as a value added service for his customers he has implemented a Wi-Fi hot-spot. Lynne has read news articles about how hackers wait at hot-spots trying to take advantage of unsuspecting users. He wants to avoid this problem at his hotel. What is an efficient and practical step that Lynne can take to decrease the likelihood of active attacks on his customers' wireless computers?
Options
- AEnable station-to-station traffic blocking by the access points in the hotel.
- BImplement Network Access Control (NAC) and require antivirus and firewall software along with
- CImplement an SSL VPN in the WLAN controller that initiates after HTTPS login.
- DRequire EAP-FAST authentication and provide customers with a username/password on their
How the community answered
(57 responses)- A72% (41)
- B18% (10)
- C4% (2)
- D7% (4)
Explanation
In a public Wi-Fi hotspot, like the one Lynne runs in his hotel, ensuring customer security against active attacks is crucial. Active attacks involve unauthorized access, eavesdropping, or manipulation of the network traffic. To mitigate such threats, an effective and practical step is: Station-to-Station Traffic Blocking: Also known as client isolation, this feature prevents direct communication between devices connected to the Wi-Fi network. By enabling this on the access points, Lynne can significantly decrease the likelihood of active attacks like man-in-the-middle (MITM) attacks, where an attacker intercepts and possibly alters the communication between two The other options, while beneficial for network security, might not be as straightforward or practical for Lynne's situation: Network Access Control (NAC) requires a more complex infrastructure and management, which might not be ideal for a small hotel setup. Implementing an SSL VPN adds an extra layer of security but might complicate the login process for users, potentially affecting the user experience. Requiring EAP-FAST authentication provides secure authentication but may not be feasible for transient customers who expect quick and easy network access. Therefore, enabling station-to-station traffic blocking is a practical and efficient measure that Lynne can implement to enhance customer security on the Wi-Fi network.
Topics
Community Discussion
No community discussion yet for this question.