FC0-U71 Security Practice Question
A small office wants to prevent unauthorized individuals from connecting to its wireless network. The office manager enables WPA3-Personal and configures a pre-shared key. Which additional step BEST reduces the risk of unauthorized access?
⚠ Common exam trap
The trap here is assuming that enabling strong wireless encryption alone fully secures the network, when the device's default administrative login is an independent and commonly exploited weakness.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Change the default administrator credentials on the wireless access point.
WPA3-Personal protects the wireless traffic, but the access point's management interface remains a separate attack surface. If default administrator credentials are left in place, an attacker on the local network or with physical access could log in and change settings, create a backdoor, or disable security. Replacing those defaults with a unique strong passphrase closes that path while preserving the encryption already configured.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set the pre-shared key to the office street address for easy recall.
Why it's wrong here
A pre-shared key based on a publicly discoverable detail such as a street address is guessable and vulnerable to dictionary or targeted guessing attacks. Strong pre-shared keys should be long, random, and not derived from information an outsider could find. Using a memorable address undermines the protection WPA3-Personal provides, so this choice weakens rather than strengthens unauthorized-access prevention.
- ✓
Change the default administrator credentials on the wireless access point.
Why this is correct
Default administrator credentials are publicly documented and are a common way attackers gain control of an access point, then alter its configuration or add rogue access. Changing them to a unique, strong passphrase protects the management interface. WPA3-Personal secures the wireless link, but it does not protect the device's administrative login, so this step directly reduces the risk of unauthorized access to the network.
- ✗
Configure the access point to use WEP encryption for backward compatibility.
Why it's wrong here
WEP is an obsolete encryption standard with well-known weaknesses that allow keys to be recovered in minutes using widely available tools. Downgrading from WPA3-Personal to WEP would make the network substantially easier to compromise, directly contradicting the goal. Backward compatibility is not required here because the office has already chosen WPA3-Personal, so this step increases rather than reduces risk.
- ✗
Enable SSID broadcast so devices can find the network easily.
Why it's wrong here
Broadcasting the SSID makes the network visible to anyone nearby and does not restrict who can attempt to connect. It provides convenience for legitimate users, but it does not reduce unauthorized access because the pre-shared key is still the only barrier. Disabling broadcast, while not a strong control by itself, removes casual discovery and is a better fit for this scenario than advertising the network.
Go deeper
Related to this question
About these practice questions
This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.