The SSID broadcast for a wireless router has been disabled but a network administrator notices that unauthorized users are accessing the wireless network. The
administrator has determined that attackers are still able to detect the presence of the wireless network despite the fact the SSID has been disabled. Which of the
following would further obscure the presence of the wireless network?

A.
Upgrade the encryption to WPA or WPA2

B.
Create a non-zero length SSID for the wireless router

C.
Reroute wireless users to a honeypot

D.
Disable responses to a broadcast probe request

Explanation:
When “SSID broadcast” is disabled you can:
1) Completely disable the sending of beacons
2) Disable probe responses except in cases where the probe request was explicitly addressed to the correct SSID (ignore broadcast probe requests to the wildcard
SSID) and was from an authorized client (apply MAC Address filtering), and even send a null SSID in the probe responses to those.