nerdexam
GIAC

GPEN · Question #100

You are concerned about war driving bringing hackers attention to your wireless network. What is the most basic step you can take to mitigate this risk?

The correct answer is C. Don't broadcast SSID. Disabling SSID broadcast is the most basic step to reduce wireless network visibility to war drivers, as it prevents the network name from appearing in passive scans.

Penetration Testing Foundations & Reconnaissance

Question

You are concerned about war driving bringing hackers attention to your wireless network. What is the most basic step you can take to mitigate this risk?

Options

  • AImplement WEP
  • BImplement MAC filtering
  • CDon't broadcast SSID
  • DImplement WPA

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    10% (3)
  • C
    84% (26)
  • D
    3% (1)

Why each option

Disabling SSID broadcast is the most basic step to reduce wireless network visibility to war drivers, as it prevents the network name from appearing in passive scans.

AImplement WEP

WEP (Wired Equivalent Privacy) is a deprecated encryption protocol with well-documented cryptographic weaknesses that can be cracked in minutes, making it an ineffective security control and not the most basic mitigation for war driving visibility.

BImplement MAC filtering

MAC filtering restricts which devices can associate with an access point, but the network SSID remains visible in beacon frames, so it does not reduce war driving visibility and MAC addresses can be spoofed.

CDon't broadcast SSIDCorrect

War driving relies on passive scanning tools that detect beacon frames containing the SSID broadcast by access points; suppressing the SSID broadcast means the network will not appear in these passive scans, reducing its visibility to opportunistic attackers. While this is considered security through obscurity and a determined attacker can still discover the network through active probing, it is the simplest and most immediate mitigation step. It requires no additional hardware or complex configuration changes.

DImplement WPA

WPA provides strong encryption and authentication, which is a more complex configuration change and addresses data security rather than directly reducing network visibility to war drivers performing passive scans.

Concept tested: SSID broadcast suppression to reduce war driving exposure

Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/wifi-security

Topics

#war driving#SSID broadcasting#wireless security#reconnaissance mitigation

Community Discussion

No community discussion yet for this question.

Full GPEN Practice