CyberCertPrepNetwork FundamentalsWireless BasicsEASYFree question
Scenario
During a wireless security assessment, a tester notices that the target network broadcasts its SSID in beacon frames but users are told the "network is hidden" for security. The tester captures probe request frames from clients seeking the hidden SSID.
What does this demonstrate about SSID hiding, and what persistent security problem do probe requests create?
- A.SSID hiding prevents the network from being discovered by casual wardrivers but is effective against targeted attacks
- B.SSID hiding is an effective security control when combined with MAC filtering; the combination makes the network nearly invisible
- C.Probe requests only contain the client's MAC address, not the SSID; the hidden SSID cannot be discovered passively
- D.SSID hiding is ineffective: the SSID is still visible in probe requests sent by associated clients, in probe responses, and in association frames. Probe requests expose the hidden SSID because clients actively broadcast it when searching for the network, enabling passive discovery and creating a target for evil twin attacks
Why D is correct