Saturday, November 24, 2007

Security: Wireless

How can you prevent unauthorized computers from connecting to your wireless network? (Select TWO.)

1. Use 802.11g wireless account points (WAPs).
2. >>Implement WEP encryption.
3. Configure the network for ad-hoc mode.
4. Configure the network for infrastructure mode.
5. Change the default SSID on connection devices.
6. >>Implement WPA.

Explanation : You should implement Wired Equivalent Privacy (WEP) or implement Wi-Fi Protected Access (WPA) mode to prevent unauthorized computers from connecting to your wireless network. The primary purpose of WEP is to encrypt data during transmission based on a common encryption key, but it can also implement computer authentication. The specifics of how features are implemented vary by manufacturer. With most, you can either enter a key or have it generated automatically. Most WAPs come unsecured by default and default to downloading the key automatically to any wireless computer that connects to the WAP.
WPA is a more enhanced security system and supports user authentication using the Extensible Authentication Protocol (EAP) or a pre-shared key (PSK). WPA addresses shortcomings inherent in WEP. In addition to WPA support for user authentication, it is designed to check the integrity of encryption keys. EAP-based authentication is inherently more secure than the authentication used with WEP. User names and passwords are encrypted with EAP-based security, so it is less likely that authentication security will be compromised.

Ad hoc mode configures computers in a peer-to-peer configuration with no central access point.

Infrastructure mode requires one or more WAPs and enables you to connect a wireless network to a wired network. Neither mode in itself does anything to prevent authorized access.

You should not expect changing the default SSID to prevent unauthorized access. You should change the default SSID, but if you do not take any other actions to secure the network, the SSID is broadcast in clear text. Computers will be able to detect the network by its SSID and connect.

Using 802.11g WAPs will not in itself prevent unauthorized access. WAPs come from the manufacturer unsecured. If you take no other action to secure the WAP and the network, anyone within range will be able to detect the WAP and connect through it to your network.
Objective: Security