What is SSID cloaking (hiding the SSID), and why is it NOT considered an effective security control?

• A.SSID cloaking is an effective first line of defense; it prevents all unauthorized users from connecting.
• B.SSID cloaking removes the SSID from AP beacon frames, so the network does not appear in Wi-Fi scans. It is not an effective security control because: (1) The SSID is still transmitted in probe requests (clients actively scan for hidden SSIDs) and probe responses, association requests/responses, and reassociation frames - all visible with a wireless packet analyzer in monitor mode; (2) It provides no authentication or encryption; (3) Clients searching for hidden SSIDs broadcast the SSID name, revealing it to any passive observer; (4) Attackers use tools like Kismet or airodump-ng to capture probe traffic and discover hidden SSIDs within seconds.
• C.SSID cloaking encrypts the SSID in beacon frames; it requires WPA3 to be effective.