Ethical Hacking Essentials Practice Test

Which practice should be followed when configuring a wireless network to protect it from potential attacks?

1. Enable SSID broadcasting

2. Disable MAC address filtering

3. Enable MAC address filtering on APs or routers

4. Limit the number of users

The correct answer is: Enable MAC address filtering on APs or routers

Enabling MAC address filtering on access points (APs) or routers is an effective practice for enhancing the security of a wireless network. This method involves specifying which devices are allowed or denied access to the network based on their unique MAC (Media Access Control) addresses. When configured properly, MAC address filtering can add an additional layer of security by allowing only pre-approved devices to connect, thus reducing the risk of unauthorized access. While it's important to acknowledge that MAC address filtering should not be the sole security measure, as MAC addresses can be spoofed, it still plays a role in a broader security strategy. This practice is especially useful in environments with known devices, such as businesses or homes, where the number of allowed devices can be managed easily. In contrast, enabling SSID broadcasting can make a network more visible to potential attackers, and disabling MAC address filtering would obviously weaken the network's defenses. Limiting the number of users can manage network load but won't actively protect against unauthorized access attempts. Thus, enabling MAC address filtering stands out as a proactive approach to safeguard wireless connections.