Which of the following best practices makes a wireless network more difficult to find?

MAC filtering controls which devices can connect but does not hide the network from being seen during a scan.

WPA2-PSK secures the authentication and encryption of the network but does not prevent the network name from being broadcast and discovered.

When the SSID broadcast is disabled, the access point stops advertising the network name in beacon frames, so the network does not appear in standard Wi-Fi scans. An attacker would need to use active probing or passive sniffing to detect the hidden network. This is a basic network obscurity practice that reduces casual discovery.

Powering down unused WAPs reduces attack surface but does not affect the discoverability of active access points.