SSCP Systems Security Certified PractitionerNetwork and Communications SecurityHard
A company is experiencing slow network performance and suspects that unauthorized devices are consuming excessive bandwidth. An investigation reveals that several employees have connected personal wireless routers to the corporate network switches, creating rogue access points. Which of the following wireless security measures would be most effective in detecting and locating these unauthorized devices?
- AImplementing a Wireless Intrusion Prevention System (WIPS).
- BUsing strong WPA3-Enterprise authentication for the corporate network.
- CEnabling MAC address filtering on all legitimate APs.
- DDisabling SSID broadcast on all legitimate APs.
Show answer & explanationAnswer & explanation
Correct answer: A. Implementing a Wireless Intrusion Prevention System (WIPS).
A Wireless Intrusion Prevention System (WIPS) continuously monitors the radio spectrum for unauthorized wireless activity, including rogue access points. It can detect, locate, and even automatically contain these rogue devices, making it highly effective for this scenario.
Why the other options are wrong
- B. WPA3-Enterprise strengthens the security of legitimate corporate wireless networks but does not inherently detect or prevent rogue access points connected to the wired network.
- C. MAC address filtering is applied to legitimate APs to restrict client access, but it does nothing to detect or prevent unauthorized rogue APs from being connected to the wired network.
- D. Disabling SSID broadcast only hides the SSID from casual scanners but does not prevent rogue APs from being deployed or detected, nor does it prevent connection to them.
Wireless Intrusion Prevention System (WIPS)
A security system that actively monitors the radio frequency spectrum for unauthorized access points, rogue devices, and other wireless threats.
- Detects rogue APs, ad-hoc networks, and deauthentication attacks.
- Can locate the physical position of unauthorized devices.
- Provides automated prevention and containment capabilities.
Memory trick: Wireless Threats Need WIPS: Detect, Locate, Contain.