220-801 · Question #640
Which of the following can be implemented on a WAP to ensure that only certain client machines can access it?
The correct answer is C. MAC filtering. MAC filtering on a wireless access point restricts network access to only devices whose hardware MAC addresses appear on an approved list. This ensures only authorized client machines can connect.
Question
Which of the following can be implemented on a WAP to ensure that only certain client machines can access it?
Options
- AWire encryption
- BDisabling SSID
- CMAC filtering
- DPort forwarding
How the community answered
(28 responses)- A7% (2)
- B4% (1)
- C86% (24)
- D4% (1)
Why each option
MAC filtering on a wireless access point restricts network access to only devices whose hardware MAC addresses appear on an approved list. This ensures only authorized client machines can connect.
Wireless encryption (WEP, WPA, WPA2) protects data in transit but does not restrict which specific devices can attempt to connect to the WAP.
Disabling the SSID hides the network name from passive scans but does not prevent a device that knows the SSID from connecting.
MAC filtering examines the hardware MAC address of each device attempting to associate with the WAP and allows or denies the connection based on a configured allow list. Because every network interface has a unique burned-in MAC address, this provides a device-level access control mechanism independent of credentials or encryption keys.
Port forwarding directs inbound traffic from the internet to a specific internal host and does not control wireless client association.
Concept tested: MAC filtering for wireless client access control
Source: https://www.wi-fi.org/knowledge-center/faq/how-does-mac-address-filtering-work
Topics
Community Discussion
No community discussion yet for this question.