Certified Incident Handler (CIH) Practice Ecam

Which of the following should NOT be considered a best practice for wireless security?

1. Change default passwords on wireless devices

2. Use outdated encryption protocols

3. Implement MAC address filtering

4. Disable SSID broadcasting when possible

The correct answer is: Use outdated encryption protocols

Using outdated encryption protocols is not considered a best practice for wireless security because such protocols, like WEP (Wired Equivalent Privacy), have known vulnerabilities that can be easily exploited by attackers. Adopting these outdated methods exposes wireless networks to various security threats, including unauthorized access and data interception. In contrast, changing default passwords on wireless devices is essential to prevent unauthorized access, as default settings are often widely known and can be easily exploited. Implementing MAC address filtering helps to limit access to the network to specific devices, adding an additional layer of protection. Disabling SSID broadcasting can also enhance security by making the network less visible to casual users, though it is not a foolproof measure. Therefore, opting for modern, secure encryption protocols, such as WPA3, is crucial for protecting wireless communications effectively.