Protecting Networks: Managerial Controls and Wireless Security · 保护网络：管理控制与无线安全
| English | 中文 | Pinyin · 拼音 |
|---|---|---|
| split tunneling/splɪt ˈtʌnəlɪŋ/ | 分离隧道 | fēn lí suì dào |
| WPA3/ˌdʌbljuː piː eɪ ˈθriː/ | Wi-Fi 保护接入第三代 | bǎo hù jiē rù dì sān dài |
Policies set the standard
- A router security policy and switch security policy ban local accounts.
- A VPN policy sets authentication rules and forbids split tunneling 分离隧道.
- A wireless security policy requires strong encryption.
政策设定标准
- 路由器安全政策和交换机安全政策禁止本地账户。
- VPN政策设定身份验证规则并禁止分离隧道(split tunneling)。
- 无线安全政策要求强加密。
Locking down wireless
- Disable beacon frames so the network is harder to find.
- Control signal strength so it does not leak outside the building.
- Enable WPA3 Wi-Fi 保护接入第三代 — old WEP and original WPA are broken.
锁定无线网络
- 禁用信标帧,让网络更难被发现。
- 控制信号强度,使它不泄漏到建筑外。
- 启用WPA3(Wi-Fi 保护接入第三代)——旧的WEP和原始WPA已被攻破。
Strong wireless choice or weak? · 强无线选择还是弱无线选择？
WPA3 is strong; WEP and the original WPA are broken. Reducing signal leak and disabling beacons help. · WPA3是强的；WEP和原始WPA已被攻破。减少信号泄漏和禁用信标有助于安全。
Which is the strongest current wireless encryption? · 当前最强的无线加密是什么？
WPA3 is today's strongest. · WPA3 是当今最强的。
Why control a wireless network's signal strength? · 为什么要控制无线网络的信号强度？
A leaking signal invites outside attackers. · 泄漏的信号会招致外部攻击者。
____ filtering allows only known devices onto the network. · ____过滤仅允许已知设备接入网络。
MAC filtering restricts by hardware address. · MAC过滤 通过硬件地址进行限制。
Which harden a wireless network? (Choose all) · 哪些措施能加固无线网络？（多选）
WEP is broken — it weakens security. · WEP已被攻破——它会削弱安全性。
Restricting who joins
- Use MAC filtering to allow only known devices.
- Require users to authenticate before joining.
- Together these keep unknown devices off the network.
限制谁能加入
- 使用MAC过滤只允许已知设备。
- 要求用户在加入前进行身份验证。
- 这些一起把未知设备挡在网络外。
WEP and the original WPA have known, unfixable weaknesses. If a question offers them as a "secure" option, they are the wrong answer — WPA3 is today's strong choice.
WEP和原始WPA有已知且无法修复的弱点。如果题目把它们作为"安全"选项,那是错误答案——WPA3是当今的强选择。
WEP is a safe choice for a modern secure wireless network. · WEP是现代安全无线网络的安全选择。
WEP is broken; use WPA3. · WEP 已被攻破；请使用 WPA3。
A café broadcasts a strong Wi-Fi signal that reaches the parking lot. An attacker sits outside and probes it. Controlling signal strength so the network stops at the walls removes that exposure entirely.
一家咖啡馆广播的强Wi-Fi信号能到达停车场。攻击者坐在外面探测它。控制信号强度使网络在墙壁处停止,能完全消除这种暴露。
Written policies (router, switch, VPN, wireless) set a minimum standard. Harden wireless by disabling beacon frames, controlling signal strength, enabling WPA3, and using MAC filtering plus authentication. Never trust WEP or original WPA.
书面政策(路由器、交换机、VPN、无线)设定最低标准。通过禁用信标帧、控制信号强度、启用WPA3、使用MAC过滤加身份验证来加固无线。绝不信任WEP或原始WPA。