GPEN · Question #100
You are concerned about war driving bringing hackers attention to your wireless network. What is the most basic step you can take to mitigate this risk?
The correct answer is C. Don't broadcast SSID. Disabling SSID broadcast is the most basic step to reduce wireless network visibility to war drivers, as it prevents the network name from appearing in passive scans.
Question
You are concerned about war driving bringing hackers attention to your wireless network. What is the most basic step you can take to mitigate this risk?
Options
- AImplement WEP
- BImplement MAC filtering
- CDon't broadcast SSID
- DImplement WPA
How the community answered
(31 responses)- A3% (1)
- B10% (3)
- C84% (26)
- D3% (1)
Why each option
Disabling SSID broadcast is the most basic step to reduce wireless network visibility to war drivers, as it prevents the network name from appearing in passive scans.
WEP (Wired Equivalent Privacy) is a deprecated encryption protocol with well-documented cryptographic weaknesses that can be cracked in minutes, making it an ineffective security control and not the most basic mitigation for war driving visibility.
MAC filtering restricts which devices can associate with an access point, but the network SSID remains visible in beacon frames, so it does not reduce war driving visibility and MAC addresses can be spoofed.
War driving relies on passive scanning tools that detect beacon frames containing the SSID broadcast by access points; suppressing the SSID broadcast means the network will not appear in these passive scans, reducing its visibility to opportunistic attackers. While this is considered security through obscurity and a determined attacker can still discover the network through active probing, it is the simplest and most immediate mitigation step. It requires no additional hardware or complex configuration changes.
WPA provides strong encryption and authentication, which is a more complex configuration change and addresses data security rather than directly reducing network visibility to war drivers performing passive scans.
Concept tested: SSID broadcast suppression to reduce war driving exposure
Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/wifi-security
Topics
Community Discussion
No community discussion yet for this question.