Mitigating Wardriving Attacks in Retail Wi-Fi

312-50v13 By islever Editorial Last updated

Hacking Wireless Networks

Short answer

D Implement WPA3 encryption for the store's Wi-Fi network to secure data transmission and prevent unauthorized access despite network discovery.

Question

As the lead security engineer for a retail corporation, you are assessing the security of the wireless networks in the company's stores. One of your main concerns is the potential for "Wardriving" attacks, where attackers drive around with a Wi-Fi-enabled device to discover vulnerable wireless networks. Given the nature of the retail stores, you need to ensure that any security measures you implement do not interfere with customer experience, such as their ability to access in-store Wi-Fi. Taking into consideration these factors, which of the following would be the most suitable measure to mitigate the risk of Wardriving attacks?
  1. Limit the range of the store's wireless signals
  2. Implement MAC address filtering
  3. Disable SSID broadcasting
  4. Implement WPA3 encryption for the store's Wi-Fi network Correct Answer

Key Takeaways

The core concept tested is wireless security best practices, specifically countering Wardriving by ensuring networks are encrypted rather than relying on obscurity or physical signal limitations.

This question addresses the mitigation of Wardriving attacks while maintaining customer accessibility in a retail environment. It establishes that strong encryption is the primary defense against unauthorized network access.

Common mistake: Candidates often choose A (Limit range) because it physically prevents distant detection, but this negatively impacts legitimate indoor coverage and customer experience, which contradicts the prompt's constraints.

Expert Analysis

Why the Answer Is Correct

Wardriving involves locating vulnerable wireless networks to launch further attacks. The most effective way to mitigate the risk of an attacker successfully connecting to or exploiting the network once discovered is to ensure the traffic is encrypted with a robust protocol. WPA3 provides strong cryptographic protection, making captured data useless to attackers even if they manage to associate with the SSID. This measure does not interfere with customer experience, as customers simply need to provide credentials or use modern authentication methods.

Why the Other Options Are Wrong

Option A (Limit range) is incorrect because it can create dead zones within the store, degrading the quality of service for legitimate customers, which violates the requirement to maintain customer experience. Option B (MAC filtering) is easily bypassed via MAC address spoofing and creates significant administrative overhead. Option C (Disable SSID broadcasting) is a form of security through obscurity; wardrivers and specialized tools can easily detect hidden SSIDs through probe requests and responses, and it can cause connectivity issues for some client devices.

Community Comment Notes

The community consensus strongly favors D, noting that WPA3 is the industry standard for securing wireless communications. One commenter highlighted that EC-Council materials prioritize strong encryption as the first line of defense. Another user pointed out that limiting range could negatively impact customers, aligning with the prompt's constraints. While some argued for limiting range to physically prevent wardriving, the majority correctly identified that encryption is the functional security control required.

Exam Strategy

Always prioritize security controls that provide actual protection over those that rely on obscurity or negative user experience. When asked about mitigating remote discovery-based threats like Wardriving, look for encryption standards (WPA2/WPA3) rather than physical adjustments unless explicitly stated otherwise.

Frequently Asked Questions

Why isn't limiting signal range the best solution?

While limiting range reduces detection distance, it often creates coverage gaps inside the store, harming the customer experience which the question explicitly seeks to preserve.

Does disabling SSID broadcast stop wardriving?

No. Wardriving tools can easily detect hidden SSIDs by analyzing network traffic (probe requests/responses), making this a weak security control compared to encryption.

More 312-50v13 FAQ →

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. Dogeo 👍 5 Answered D
    Wardriving is looking for unencrypted wifi signals to attack and limiting the range could negatively impact customers
  2. killwitch 👍 2 Answered D
    WPA3 encryption is the single good solution from options presented.
  3. NikoTomas 👍 1 Answered D
    According to EC-Council (e.g., CEH v12, ECSA): The highest priority recommendations for mitigating wardriving and wireless threats usually follow this order: ✅ 1. Use Strong Encryption: WPA3 or WPA2-Enterprise EC-Council emphasizes this as the first and most critical defense: 📌 This is always at the top of EC-Council wireless security best practices. ✅ 2. Implement WIPS/WIDS (Wireless Intrusion Prevention/Detection Systems) EC-Council promotes active detection and response to: • Detect rogue APs • Identify wardriving probes • Block deauth or Evil Twin attacks 📌 WIPS is central to CEH's "Defense in Depth" for wireless networks. ✅ 3. Disable SSID Broadcast (Optional but Recommended) • Reduces visibility to casual attackers • Not foolproof, but helps reduce surface ✅ 4. MAC Filtering and Network Access Control (NAC) While spoofable, MAC filtering is still encouraged as part of layered security. • NAC is more effective, particularly with 802.1X Continuation below...
  4. pindinga1 👍 1 Answered A
    This answer is A, this question says Wardriving, not for secure and encryption methods.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Agent-Based vs Network-Based Vulnerability Scanners

S-grade

Network Sniffing Techniques for Penetration Testing

S-grade

File-less Malware Bypassing Application Whitelisting

S-grade

SQL Injection Bypass in Login Forms

S-grade

← Back to 312-50v13 Study Guide