Limiting the amount of available IP host addresses on the WLAN DHCP server to prevent unauthorized DHCP leases.

Summary of Finding From the Lab
The First parts is establishing a remote connection to the Kali virtual machine and then explore the online manual for each of the hacking application tools such as airman-ng, airodump-ng, aircrack-ng, and aireplay-ng. The second part is providing a summary of a video that demonstrates the use of the aircrack-ng tools in identifying and cracking passwords on a WLAN. The Third part is to assess myself by using the aircrack-ng on the same capture file (wlan0) in the video to crack the WPA and get the key. The fourth part is to draft a WLAN security implementation plan to mitigate the risk, threats, and vulnerabilities identified by the lab
Critical Risks, Threats, and Vulnerabilities on the WLAN
Risks, threats, and vulnerabilities are prominent with WLAN infrastructures such as the eavesdropping, denial of service, man in the middle attack, spoofing, sniffing, and illegal entry in to the network, these are only a few that can occur. There are also risks involved with logging onto access points in airports or other public places, as an attacker can enable a rogue wireless access point to capture credentials and other data while an unsuspecting user connects to the Internet using a free WLAN connection.
Assessment of the Overall Security of This WLAN
Overall security of this WLAN is considered very weak. This required using and utilizing the strong security methods such as encryption, authentication and sitting and configure the firewalls.

Security Recommendations and Conclusion
Below are some of the security countermeasures that must be implemented in order to provide the required security:
• Enabling MAC address filtering on the WAPs. These addresses can be spoofed.
• Disabling SSID broadcast. The SSID can still be found through other means.
• Limiting the amount of available IP host addresses on the WLAN DHCP server to prevent unauthorized DHCP leases.
• Enabling WPA2 to maximize encryption and ensure data transmission confidentiality. WPA2-Enterprise utilizes additional IT infrastructure such as a RADIUS server that helps authenticate and secure against unauthorized access.
• Utilizing hashing for data transmissions and emails through WLANs to ensure data integrity.