Exam 312-50v13 topic 1 question 187 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 187
Topic #: 1

As the lead security engineer for a retail corporation, you are assessing the security of the wireless networks in the company's stores. One of your main concerns is the potential for "Wardriving" attacks, where attackers drive around with a Wi-Fi-enabled device to discover vulnerable wireless networks. Given the nature of the retail stores, you need to ensure that any security measures you implement do not interfere with customer experience, such as their ability to access in-store Wi-Fi. Taking into consideration these factors, which of the following would be the most suitable measure to mitigate the risk of Wardriving attacks?

A. Limit the range of the store's wireless signals
B. Implement MAC address filtering
C. Disable SSID broadcasting
D. Implement WPA3 encryption for the store's Wi-Fi network

Show Suggested Answer

Suggested Answer: D 🗳️

by pindinga1 at Feb. 5, 2025, 1:58 a.m.

Comments

Submit Cancel

Dogeo

Highly Voted 4 months, 2 weeks ago

Selected Answer: D

Wardriving is looking for unencrypted wifi signals to attack and limiting the range could negatively impact customers

upvoted 5 times

...

KnightHeart

Most Recent 1 month ago

Selected Answer: A

A. Limit the range of the store's wireless signals Why this is the most suitable measure: Directly Addresses Wardriving Risk: Wardriving relies on detecting wireless signals from outside the target area. Reducing the signal range (e.g., via antenna power adjustments or physical shielding) ensures the Wi-Fi network is only accessible within the store premises, making it undetectable to attackers driving by. Minimizes Customer Experience Impact: Unlike other measures, signal range limitation does not require customers to change behaviors (e.g., entering a hidden SSID or dealing with MAC filtering). It simply ensures the network is available where needed (inside the store) and not beyond. Practical for Retail Environments: Retail stores often have defined physical boundaries. Containing the signal within these boundaries (e.g., using directional antennas or adjusting power settings) is feasible and does not interfere with in-store connectivity.

upvoted 1 times

...

NikoTomas

3 months, 1 week ago

Selected Answer: D

According to EC-Council (e.g., CEH v12, ECSA): The highest priority recommendations for mitigating wardriving and wireless threats usually follow this order: ✅ 1. Use Strong Encryption: WPA3 or WPA2-Enterprise EC-Council emphasizes this as the first and most critical defense: 📌 This is always at the top of EC-Council wireless security best practices. ✅ 2. Implement WIPS/WIDS (Wireless Intrusion Prevention/Detection Systems) EC-Council promotes active detection and response to: • Detect rogue APs • Identify wardriving probes • Block deauth or Evil Twin attacks 📌 WIPS is central to CEH's "Defense in Depth" for wireless networks. ✅ 3. Disable SSID Broadcast (Optional but Recommended) • Reduces visibility to casual attackers • Not foolproof, but helps reduce surface ✅ 4. MAC Filtering and Network Access Control (NAC) While spoofable, MAC filtering is still encouraged as part of layered security. • NAC is more effective, particularly with 802.1X Continuation below...

upvoted 1 times

NikoTomas

3 months, 1 week ago

...continuation: ✅ 5. Change Defaults (SSID, Admin Passwords) Always emphasized in CEH materials as a basic yet often neglected security practice. ✅ 6. Lower AP Power Output (Signal Range Management) A physical-level control — EC-Council recommends minimizing signal bleed outside controlled zones. ✅ 7. Segmentation and Guest Isolation Not always listed under “wardriving” directly, but EC-Council promotes VLAN segmentation to contain any breach, especially from wireless clients. ✅ 8. VPN, HTTPS, and Application Layer Protections • Useful for damage control in case of compromise • Part of a broader data-in-transit protection strategy ✅ 9. Disable Wi-Fi When Not in Use

upvoted 1 times

...

killwitch

3 months, 3 weeks ago

Selected Answer: D

WPA3 encryption is the single good solution from options presented.

upvoted 2 times

...

pindinga1

4 months, 4 weeks ago

Selected Answer: A

This answer is A, this question says Wardriving, not for secure and encryption methods.

upvoted 2 times

...