GSLC · Question #380
Mark works as a Network Administrator for Infonet Inc. The company has a Windows 2000 Active Directory domain-based network. The domain contains one hundred Windows XP Professional client computers…
The correct answer is C. Configure the authentication type for the wireless LAN to Shared Key. D. Disable SSID Broadcast and enable MAC address filtering on all wireless access points. F. On each client computer, add the SSID for the wireless LAN as the preferred network. To meet the policy of allowing authorized computers to auto-connect while hiding the network from unauthorized users, Shared Key WEP authentication, disabled SSID broadcast with MAC filtering, and client-side preferred network configuration must all be used together.
Question
Mark works as a Network Administrator for Infonet Inc. The company has a Windows 2000 Active Directory domain-based network. The domain contains one hundred Windows XP Professional client computers. Mark is deploying an 802.11 wireless LAN on the network. The wireless LAN will use Wired Equivalent Privacy (WEP) for all the connections. According to the company's security policy, the client computers must be able to automatically connect to the wireless LAN. However, the unauthorized computers must not be allowed to connect to the wireless LAN and view the wireless network. Mark wants to configure all the wireless access points and client computers to act in accordance with the company's security policy. What will he do to accomplish this? Each correct answer represents a part of the solution. Choose three.
Options
- AConfigure the authentication type for the wireless LAN to Open system.
- BInstall a firewall software on each wireless access point.
- CConfigure the authentication type for the wireless LAN to Shared Key.
- DDisable SSID Broadcast and enable MAC address filtering on all wireless access points.
- EBroadcast SSID to connect to the access point (AP).
- FOn each client computer, add the SSID for the wireless LAN as the preferred network.
How the community answered
(50 responses)- A4% (2)
- B16% (8)
- C74% (37)
- E6% (3)
Why each option
To meet the policy of allowing authorized computers to auto-connect while hiding the network from unauthorized users, Shared Key WEP authentication, disabled SSID broadcast with MAC filtering, and client-side preferred network configuration must all be used together.
Open system authentication allows any device to authenticate without a key, which would permit unauthorized computers to associate with the access point and violates the security policy.
Installing firewall software on each access point does not control which wireless clients can associate or authenticate to the LAN and does not address the stated requirements.
Shared Key authentication requires that the client possess the WEP key to complete the authentication handshake, ensuring only computers configured with the correct key - that is, authorized company computers - can authenticate to the wireless LAN.
Disabling SSID broadcast prevents the wireless network from appearing in the list of available networks on unauthorized computers, and enabling MAC address filtering adds a second layer by blocking connections from any network adapter not explicitly whitelisted on the access points.
Broadcasting the SSID makes the wireless network visible to all nearby devices including unauthorized computers, directly contradicting the requirement to hide the network from unauthorized users.
Because SSID broadcast is disabled, client computers cannot discover the network passively; adding the SSID as a preferred network on each client allows Windows to proactively probe for the hidden network and connect automatically when the access point is in range.
Concept tested: WEP Shared Key auth, SSID hiding, and MAC filtering configuration
Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-top
Topics
Community Discussion
No community discussion yet for this question.