SY0-301 · Question #548
A security administrator wishes to increase the security of the wireless network. Which of the following BEST addresses this concern?
The correct answer is A. Change the encryption from TKIP-based to CCMP-based. CCMP (Counter Mode with CBC-MAC Protocol) uses AES encryption and is significantly stronger than the older TKIP protocol, making it the best choice for improving wireless network security.
Question
A security administrator wishes to increase the security of the wireless network. Which of the following BEST addresses this concern?
Options
- AChange the encryption from TKIP-based to CCMP-based.
- BSet all nearby access points to operate on the same channel.
- CConfigure the access point to use WEP instead of WPA2.
- DEnable all access points to broadcast their SSIDs.
How the community answered
(45 responses)- A87% (39)
- B9% (4)
- C2% (1)
- D2% (1)
Why each option
CCMP (Counter Mode with CBC-MAC Protocol) uses AES encryption and is significantly stronger than the older TKIP protocol, making it the best choice for improving wireless network security.
CCMP is the encryption protocol required by WPA2 and uses AES-128 in counter mode, providing strong confidentiality, integrity, and authentication. TKIP was a transitional fix for WEP's weaknesses and has known vulnerabilities, so migrating to CCMP-based encryption represents a concrete security improvement for the wireless network.
Configuring all access points on the same channel causes co-channel interference and degrades network performance without improving security.
WEP is a deprecated protocol with well-documented cryptographic weaknesses and is far less secure than WPA2.
Broadcasting SSIDs makes the network name publicly visible to anyone scanning for wireless networks, which reduces security rather than improving it.
Concept tested: Wireless encryption upgrade from TKIP to CCMP/AES
Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/create-wmi-filters-for-the-gpo
Topics
Community Discussion
No community discussion yet for this question.