220-801 Question #970: Real Exam Question with Answer & Explanation

The correct answer is B: Use MAC filtering. MAC filtering restricts network access by allowing only devices with pre-approved hardware addresses to connect, making it the most effective device-level access control listed. The other options reduce visibility but do not directly restrict which devices can join.

Question

Joe, a user, wants to secure his home wireless network and allow only certain devices access to the network. Which of the following measures would be the MOST effective means of limiting access?

Options

ATurn off DHCP
BUse MAC filtering
CDisable DMZ
DTurn off SSID broadcasting

Explanation

MAC filtering restricts network access by allowing only devices with pre-approved hardware addresses to connect, making it the most effective device-level access control listed. The other options reduce visibility but do not directly restrict which devices can join.

Common mistakes.

A. Turning off DHCP prevents automatic IP assignment but does not block access, as a savvy user can manually assign a valid static IP and still connect.
C. Disabling the DMZ affects how traffic is routed to an internal host from the internet and has no effect on which wireless clients can join the local network.
D. Disabling SSID broadcasting hides the network name but does not prevent access, as the SSID can still be discovered with wireless scanning tools.

Concept tested. Wireless network access control using MAC filtering

Reference. https://www.comptia.org/certifications/a

Community Discussion

No community discussion yet for this question.

Full 220-801 Practice