How it works
Wireless access adds risk because radio signals extend beyond walls. Authentication, encryption, approved access points, and monitoring matter.
Choose encrypted, authenticated Wi-Fi for internal resources and keep guest networks separated from sensitive systems.
Common error
A hidden network name is not a strong security control by itself.
Worked example
An access point with a familiar school name appears in an unexpected location. Decide what the name establishes.
Evidence
SSID: School-Staff
Inventory match: none yet
Location: visitor lobby
Approval status: unverifiedA familiar SSID does not prove the device is authorized. Compare its identity and configuration with the approved inventory, report the observation, and use the organization investigation process. Keep internal and guest wireless appropriately authenticated and separated.
Exercises
3.3.1
Why is hiding a network name not a substitute for authentication and encryption?
Show solution
A hidden name does not reliably prevent discovery or unauthorized use. Authentication controls entry, and encryption protects suitable wireless traffic; the name setting does not provide those protections.
3.3.2
Name two checks before adding a newly discovered access point to a trusted device inventory.
Show solution
Confirm its owner and approval, and verify device identity and configuration through trusted management records. Do not trust only its broadcast name.