Wireless Network Security

Correct Answer: Implement WPA3 encryption

The first security measure to implement when installing a new wireless network to ensure security should be to implement WPA3 encryption. WPA3 is the latest security protocol and security certification program developed by the Wi-Fi Alliance to secure wireless computer networks. Change default SSID and disable SSID broadcast: While changing the default Service Set Identifier (SSID) is a good practice to avoid making it obvious which hardware is being used, it's more of a measure to obscure the network's presence, rather than a robust security feature. Disabling SSID broadcast can add a layer of obscurity but does little to protect against determined attackers since the SSID can still be discovered by analyzing network traffic. Enable MAC address filtering: This involves allowing only devices with specific Media Access Control (MAC) addresses to connect to the network. While it can restrict access, MAC addresses can be easily spoofed (faked) by attackers, making this a less effective security measure. Increase signal strength: Enhancing signal strength does not inherently improve security. It might extend the network's range, potentially exposing it to more outside threats if the network extends beyond controlled areas. Enable guest access: This usually involves setting up a separate network for guests to prevent access to the main network's resources. While it's a good practice for segmenting network traffic and protecting internal resources, it doesn't directly enhance the security of the network itself. Disable DHCP: The Dynamic Host Configuration Protocol (DHCP) automatically assigns IP addresses to devices on the network. Disabling DHCP requires manually configuring IP addresses for each device, which can reduce the risk of unauthorized devices obtaining network addresses but does little to protect data transmission or prevent unauthorized access. Implementing WPA3 encryption is prioritized because it directly protects the data being transmitted over the network by encrypting it, making it difficult for unauthorized users to intercept and understand the data. Encryption is a fundamental security measure that addresses the confidentiality and integrity of your data, which is why it's often the first step in securing a wireless network.

Correct Answer: Install Additional Access Points

Installing additional access points distributes the wireless signal more evenly, improving signal strength on the affected floors. Enabling WEP, implementing VPN, and disabling SSID broadcasts are security measures, not signal improvements. Increase Channel Width and Enable QoS affect performance, rather than signal strength.

Correct Answer: Install additional access points

Installing additional access points increases the coverage area and strengthens the signal in weak or dead zones. The other options do not address the problem of weak signal strength and poor coverage.