SSCP Systems Security Certified PractitionerNetwork and Communications SecurityEasy
A network administrator is setting up a new wireless network and wants to hide the network's presence from casual users. Which of the following actions would best achieve this goal, though it is not considered a strong security measure?
- AImplementing MAC address filtering.
- BDisabling SSID broadcasting.
- CDisabling DHCP on the access point.
- DUsing a strong WPA3-Enterprise password.
Show answer & explanationAnswer & explanation
Correct answer: B. Disabling SSID broadcasting.
Disabling SSID broadcasting prevents the wireless network's name from being advertised, making it less visible to casual users. However, this is easily circumvented by attackers using wireless sniffers.
Why the other options are wrong
- A. Implementing MAC address filtering restricts access but does not hide the network's presence.
- C. Disabling DHCP prevents automatic IP address assignment, making it harder to connect but doesn't hide the network's presence.
- D. Using a strong WPA3-Enterprise password secures access once a user attempts to connect, but doesn't hide the network's presence.
SSID Broadcasting Disablement
The act of configuring a wireless access point (WAP) to not publicly advertise its network name (SSID).
- Hides the network from casual scanning.
- Does not prevent discovery by dedicated tools.
- Considered 'security through obscurity'.
Memory trick: Hiding the Name is a Simple Game.