Certified Incident Handler (CIH) Practice Ecam

What practice will not aid an incident responder in eradicating wireless security incidents?

1. Enabling UPnP protocol on connected devices

2. Implementing strong password policies

3. Disabling unused wireless networks

4. Conducting security audits

The correct answer is: Enabling UPnP protocol on connected devices

Enabling the Universal Plug and Play (UPnP) protocol on connected devices generally poses security risks rather than aiding in the mitigation of wireless security incidents. UPnP allows devices on a network to discover each other and establish services for data sharing and communication; however, it can also expose security vulnerabilities if not properly managed. Attackers can exploit UPnP to gain unauthorized access to networked devices, bypassing security controls. On the other hand, strong password policies are critical as they help prevent unauthorized access by ensuring that only users with the correct credentials can connect to the wireless network. Disabling unused wireless networks reduces potential attack surfaces by limiting the number of entry points an attacker can exploit. Conducting security audits allows organizations to identify vulnerabilities and areas for improvement, reinforcing their security posture. All these practices contribute positively towards reducing the risks associated with wireless security incidents, while enabling UPnP does not.