A security architect wishes to implement a wireless network with connectivity to the company’s
internal network. Before they inform all employees that this network is being put in place, the
architect wants to roll it out to a small test segment. Which of the following allows for greater
secrecy about this network during this initial phase of implementation?

A.
Disabling SSID broadcasting

B.
Implementing WPA2 – TKIP

C.
Implementing WPA2 – CCMP

D.
Filtering test workstations by MAC address

Explanation:
Network administrators may choose to disable SSID broadcast to hide their network from
unauthorized personnel. However, the SSID is still needed to direct packets to and from the base
station, so it’s a discoverable value using a wireless packet sniffer. Thus, the SSID should be
disabled if the network isn’t for public use.