Mitigating Wardriving Attacks in Retail Wi-Fi
As the lead security engineer for a retail corporation, you are assessing the security of the wireless networks in the company's stores. One of your main concerns is the potential for "Wardriving" attacks, where attackers drive around with a Wi-Fi-enabled device to discover vulnerable wireless networks. Given the nature of the retail stores, you need to ensure that any security measures you implement do not interfere with customer experience, such as their ability to access in-store Wi-Fi. Taking into consideration these factors, which of the following would be the most suitable measure to mitigate the risk of Wardriving attacks?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The core concept tested is wireless security best practices, specifically countering Wardriving by ensuring networks are encrypted rather than relying on obscurity or physical signal limitations.
This question addresses the mitigation of Wardriving attacks while maintaining customer accessibility in a retail environment. It establishes that strong encryption is the primary defense against unauthorized network access.
Candidates often choose A (Limit range) because it physically prevents distant detection, but this negatively impacts legitimate indoor coverage and customer experience, which contradicts the prompt's constraints.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Wardriving involves locating vulnerable wireless networks to launch further attacks. The most effective way to mitigate the risk of an attacker successfully connecting to or exploiting the network once discovered is to ensure the traffic is encrypted with a robust protocol. WPA3 provides strong cryptographic protection, making captured data useless to attackers even if they manage to associate with the SSID. This measure does not interfere with customer experience, as customers simply need to provide credentials or use modern authentication methods.Why the Other Options Are Wrong
Option A (Limit range) is incorrect because it can create dead zones within the store, degrading the quality of service for legitimate customers, which violates the requirement to maintain customer experience. Option B (MAC filtering) is easily bypassed via MAC address spoofing and creates significant administrative overhead. Option C (Disable SSID broadcasting) is a form of security through obscurity; wardrivers and specialized tools can easily detect hidden SSIDs through probe requests and responses, and it can cause connectivity issues for some client devices.Community Comment Notes
The community consensus strongly favors D, noting that WPA3 is the industry standard for securing wireless communications. One commenter highlighted that EC-Council materials prioritize strong encryption as the first line of defense. Another user pointed out that limiting range could negatively impact customers, aligning with the prompt's constraints. While some argued for limiting range to physically prevent wardriving, the majority correctly identified that encryption is the functional security control required.Exam Strategy
Always prioritize security controls that provide actual protection over those that rely on obscurity or negative user experience. When asked about mitigating remote discovery-based threats like Wardriving, look for encryption standards (WPA2/WPA3) rather than physical adjustments unless explicitly stated otherwise.
Frequently Asked Questions
Why isn't limiting signal range the best solution?
While limiting range reduces detection distance, it often creates coverage gaps inside the store, harming the customer experience which the question explicitly seeks to preserve.
Does disabling SSID broadcast stop wardriving?
No. Wardriving tools can easily detect hidden SSIDs by analyzing network traffic (probe requests/responses), making this a weak security control compared to encryption.