An organization is planning to replace its wired networks with wireless networks. Which of the following would
BEST secure the wireless network from unauthorized access?

A.
Implement Wired Equivalent Privacy (WEP)

B.
Permit access to only authorized Media Access Control (MAC) addresses

C.
Disable open broadcast of service set identifiers (SSID)

D.
Implement Wi-Fi Protected Access (WPA) 2

Explanation:
Wi-Fi Protected Access (WPA) 2 implements most of the requirements of the IEEE 802.11i standard. The
Advanced Encryption Standard (AESJ used in WPA2 provides better security. Also, WPA2 supports both the
Extensible Authentication Protocol and the preshared secret key authentication model. Implementing Wired
Equivalent Privacy (WEP) is incorrect since it can be cracked within minutes. WEP uses a static key which has
to be communicated to all authorized users, thus management is difficult. Also, there is a greater vulnerability if
the static key is not changed at regular intervals. The practice of allowing access based on Media Access
Control (MAC) is not a solution since MAC addresses can be spoofed by attackers to gain access to the
network. Disabling open broadcast of service set identifiers (SSID) is not the correct answer as they cannot
handle access control.