During an assessment, a penetration tester was able to access the organization's wireless network from outside of the building using a laptop running Aircrack-ng. Which of the following should be recommended to the client to remediate this issue?
A.
Changing to Wi-Fi equipment that supports strong encryption
When they say outside of the building, that means directional antennas are not present inside the building. 360/omnidirectional antennas are used for wifi which is not good for security
B would be the best answer here. There is no mention the question what encryption was in use. For me the first step to stopping attacks from external locations is to install directional antennas and possibly lower the power to reduce back scatter.
The MOST effective recommendation to remediate the tester's unauthorized access is:
A. Changing to Wi-Fi equipment that supports strong encryption
Strong encryption standards like WPA2 or WPA3 significantly improve Wi-Fi security by making it much more difficult to crack the encryption and access the network traffic.
B. Using directional antennae: While directional antennae can focus the Wi-Fi signal and potentially limit range, it wouldn't prevent unauthorized access from someone within range. The tester was able to connect from outside, indicating the network was accessible beyond its intended coverage.
D. Disabling Wi-Fi: This is a drastic measure and might not be practical depending on the organization's needs. Disabling Wi-Fi completely would prevent legitimate users from accessing the network wirelessly.
Going B here. While WPA3 can't be cracked with aircrack-ng, it can still perform a downgrade attack on it. Answer A does not say REQUIRES strong encryption, just that it SUPPORTS strong encryption. The key phrase in this question IMO is "outside the building", solve this by using a directional antennae, B.
Using Aircrack-ng, an attacker can crack Wi-Fi networks that are protected using weak encryption methods. The best way to remediate this issue is to ensure that the Wi-Fi equipment supports strong encryption standards like WPA2 or WPA3.
Therefore, the correct option is:
A. Changing to Wi-Fi equipment that supports strong encryption.
Aircrack-ng is a suite of tools for wireless security auditing and testing. It can be used to detect, monitor, and crack wireless networks, as well as recover lost or forgotten passwords. Aircrack-ng also includes powerful tools for packet analysis, allowing users to capture packets and analyze them for useful information.
Disabling Wi-Fi might be a practicable stopgap for IMMEDIATE remediation, but the question seems to suggest the best long-term fix. The employees most likely need to access the network wirelessly for their work. You need to remediate it on a fulcrum where both security and user convenience is reasonably balanced.
Yes, no algorithm is impossible to crack, but the most robust, up-to-date ones are difficult enough. If the tester cracked it that easily, chances are that either the algorithm was weak or the equipment was misconfigured—both of which are fixable without deprovisioning Wi-Fi altogether.
Aircrack-ng is a Wi-Fi security auditing tool specifically 802.11 WEP and WPA/WPA2-PSK. It is also used for cracking the WEP and WPA/WPA2-PSK keys for gaining access to a network. Aircrack-ng is used by learning individuals and security professionals to test the security, reliability of wireless networks.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
pinderanttal
1 week, 5 days agoTa2oo
3 months, 1 week agopepgua
7 months, 1 week agoMyfeedins479
9 months agojcm3
11 months, 3 weeks agosolutionz
1 year, 5 months agoKingIT_ENG
1 year, 9 months agonickwen007
1 year, 10 months ago[Removed]
1 year, 10 months ago[Removed]
1 year, 10 months agoBigBeeerd
1 year, 10 months ago[Removed]
1 year, 10 months ago[Removed]
1 year, 10 months ago[Removed]
1 year, 10 months ago[Removed]
1 year, 10 months agoOrean
1 year, 10 months ago[Removed]
1 year, 10 months agobeamage
1 year, 10 months agobeamage
1 year, 10 months agobeamage
1 year, 10 months ago[Removed]
1 year, 10 months ago[Removed]
1 year, 10 months ago[Removed]
1 year, 10 months ago