問56
頻出度★★★
無線LANのセキュリティを向上させるための対策はどれか。
平成27年度 秋期 ITパスポート試験 問56
テクノロジ系ネットワーク › ネットワーク方式
This question's explanation and your answers so far.
解説
問 56
- ア
正解 The correct answer is ア, “Make the ESSID stealth (stop broadcasting it)”. The ESSID (SSID) is the network identifier name of a wireless LAN, and normally the access point broadcasts it to the surroundings via beacons. Making it stealth stops this broadcast, so a third party can no longer find the SSID in a list. This reduces connection attempts from unrelated devices and makes it harder to give attackers a foothold for unauthorized access. It is therefore a correct measure to improve wireless LAN security.
Incorrectイ
Supplying power to the access point through the LAN cable is PoE (Power over Ethernet), which is merely a power-feeding method to reduce cabling and make installation easier. It has nothing to do with protecting communication content or preventing unauthorized connections, so it is not a security improvement measure.
Incorrectウ
WEP is a vulnerable old method whose key can be cracked in a short time, whereas WPA2 provides far stronger encryption. Changing from WPA2 to WEP actually lowers the encryption strength and reduces security.
Incorrectエ
Roaming is a mechanism by which a terminal automatically switches the access point it connects to while moving so that communication continues; it is a function for convenience and for maintaining a connection while moving. It is not a measure to enhance security.
ここがポイント
- Wireless LAN security measures include ESSID (SSID) stealth, MAC address filtering, and strong encryption such as WPA2/WPA3; as for encryption methods, WPA2 and WPA3 are safer than WEP.
- Distinguish that PoE (power feeding over the LAN cable) and roaming are mechanisms for convenience and operation, whose purpose differs from that of security improvement measures.
用語