Which of the following are security best practices for a small wireless network?

• A. Use WPA3/WPA2 with strong credentials; Enterprise with RADIUS; disable WPS; separate guest networks with isolation; keep firmware up to date; enable WIDS/WIPS; monitor logs.
• B. Use WEP; disable encryption; default credentials; no guest isolation.
• C. Use WPA2 with weak password; enable WPS.
• D. Do not enable firmware updates.

Answer: (C)

Security best practices for a small wireless network focus on strong protection, proper authentication, network segmentation, and ongoing maintenance. The strongest approach combines modern encryption (WPA3 or WPA2 with strong credentials) to keep data confidential, and, if possible, Enterprise authentication with a RADIUS server for centralized, per-user control. Disabling WPS removes a known weakness that can let attackers connect with little effort. Isolating a guest network prevents guest devices from accessing internal resources, while keeping firmware up to date closes security holes as vendors release patches. Enabling WIDS/WIPS adds active monitoring and automatic responses to suspicious activity, and regularly monitoring logs helps you detect and respond to problems early.

Options that rely on outdated or insecure choices undermine protection: using WEP or no encryption leaves data unprotected, or enabling a weak password with WPS creates easy attack paths. Delaying firmware updates leaves devices vulnerable to known exploits. The combination described above is the best for a small wireless setup.