AP Cybersecurity topic 3.2
Protecting Networks: Managerial Controls and Wireless Security
Managerial controls are policies and procedures: acceptable use policies, security training, and change management. For Wi-Fi, use WPA3 (or at least WPA2) with strong passphrases, change default router passwords, and use enterprise authentication so each user has their own login.
Protecting Networks: Managerial Controls and Wireless Security vocabulary
- Managerial control: A policy or procedure that guides people's behavior.
- Acceptable use policy (AUP): Rules for how people may use an organization's systems.
- WPA3: The current Wi-Fi security standard.
- Default credentials: Factory-set usernames and passwords that attackers already know.
AP-style practice questions
Try each one, then open the answer. To save your progress, take this quiz in the interactive course.
1. A coffee shop owner is setting up a new wireless router. Which of the following configurations provides the strongest protection?
- (A) WEP with the default password
- (B) WPA3 with a long, unique passphrase and the admin password changed
- (C) An open network with a hidden name
- (D) WPA2 with the password "coffee123"
Show answer
(B) WPA3 with a long, unique passphrase and the admin password changed WPA3 is the current standard, and changing default admin credentials removes an easy entry point.
2. Which of the following is an example of a managerial control for network security?
- (A) An acceptable use policy that employees sign
- (B) A firewall
- (C) An intrusion detection system
- (D) Encrypted Wi-Fi
Show answer
(A) An acceptable use policy that employees sign Policies that guide behavior are managerial controls.
3. A company wants each employee to log in to Wi-Fi with their own username and password, so access can be removed when someone leaves. Which of the following best meets this need?
- (A) WPA3-Personal with one shared passphrase
- (B) WPA3-Enterprise with individual accounts
- (C) An open network
- (D) MAC address filtering only
Show answer
(B) WPA3-Enterprise with individual accounts Enterprise mode authenticates each user individually, so one account can be disabled without changing everyone's password.
4. Why is leaving a router's default admin credentials unchanged a high risk?
- (A) Default credentials are often published online and easy for adversaries to find
- (B) Default credentials make the Wi-Fi slower
- (C) Default credentials disable encryption
- (D) Default credentials only work on weekends
Show answer
(A) Default credentials are often published online and easy for adversaries to find Manufacturers' default logins are public, so anyone in range could take over the router.