1D0-61C · Question #21
You want to restrict host access to a wireless access point. What is the best way to do this?
The correct answer is B. Log in to the access point and configure features, such as changing the SSID. Configuring the access point directly (option B) is the correct approach because the access point is the central control point for the wireless network - all access restrictions, such as MAC filtering, SSID management, and encryption settings, should be enforced there, not…
Question
You want to restrict host access to a wireless access point. What is the best way to do this?
Options
- AEnable MAC address filtering at each host.
- BLog in to the access point and configure features, such as changing the SSID.
- CChange the Direct Sequence Spread Spectrum (DSSS) signal at both the access point and each
- DInstall software on the host you want to limit, then use a Web browser to log in to the host and
How the community answered
(14 responses)- B93% (13)
- D7% (1)
Explanation
Configuring the access point directly (option B) is the correct approach because the access point is the central control point for the wireless network - all access restrictions, such as MAC filtering, SSID management, and encryption settings, should be enforced there, not scattered across individual hosts.
Why the distractors are wrong:
- A is wrong because MAC address filtering must be configured on the access point, not on individual hosts - hosts don't control who gets to join the network.
- C is wrong because DSSS is a radio signal modulation technique, not an access control mechanism; changing it affects signal behavior, not who is allowed to connect.
- D is wrong because installing software on a host controls that host's behavior, not access to the AP itself - it doesn't prevent other unauthorized devices from connecting.
Memory tip: Think of the access point as a bouncer at a door - the bouncer (AP) controls entry, not the guests (hosts). Any meaningful restriction must be configured where the gate actually is.
Topics
Community Discussion
7
Naledi M.Jun 21, 2026The correct answer is B. The access point itself is where you control who can connect to your wireless network, and logging into the AP to configure settings like the SSID, encryption type, and access control lists gives you centralized, authoritative control over the entire network segment. Option A is a common distractor because MAC filtering sounds security-minded, but it is configured at the AP level as well, and more importantly the question asks about restricting access at the access point, not at each individual host. Option C is a hardware-layer signal characteristic, not an access control mechanism, and D describes installing client-side software which puts control in the wrong place entirely. When you think about it from a network architecture standpoint, the AP is the gateway for all wireless clients, so that is always your first and most effective point of enforcement.
Orla P.Jun 23, 2026Solid breakdown, though worth flagging that MAC filtering at the AP is trivially bypassed by spoofing, so if anyone is studying for a performance-based question they should understand it as an authentication theater more than a real access control.
Luis F.Jun 9, 2026When I sat for this one I actually second-guessed myself for a second because A sounds so logical, but then I remembered that MAC filtering lives on the AP side not the host side, so B clicked right away. The access point is the gatekeeper, you log into it and flip the right settings like SSID changes or access control lists, that is where the real restriction happens.
Fatima Z.Jun 10, 2026Nail on the head, Luis, and my little hook for that is "AP equals Admin Point," because every gating decision, whether it is a MAC ACL or an SSID tweak, lives on the device doing the admitting, not the device asking to be admitted.
Fatima Z.Jun 8, 2026I almost picked A thinking "filter = restrict" but MAC filtering lives on the AP anyway, so B is your "ADMIN CONTROLS THE DOOR" hook, not the host.
Orla P.Jun 15, 2026B is the right call here. The access point is where you control who gets in, and from the AP admin interface you can do things like MAC filtering, SSID changes, and encryption settings all in one place, rather than trying to chase down individual hosts.
Naledi M.Jun 16, 2026Orla is right that the AP is your central control point, though worth noting that MAC filtering gives a false sense of security since MAC addresses can be spoofed, so lean on the encryption settings as your actual line of defense.