220-801 · Question #970
Joe, a user, wants to secure his home wireless network and allow only certain devices access to the network. Which of the following measures would be the MOST effective means of limiting access?
The correct answer is B. Use MAC filtering. MAC filtering restricts network access by allowing only devices with pre-approved hardware addresses to connect, making it the most effective device-level access control listed. The other options reduce visibility but do not directly restrict which devices can join.
Question
Joe, a user, wants to secure his home wireless network and allow only certain devices access to the network. Which of the following measures would be the MOST effective means of limiting access?
Options
- ATurn off DHCP
- BUse MAC filtering
- CDisable DMZ
- DTurn off SSID broadcasting
How the community answered
(26 responses)- A8% (2)
- B73% (19)
- C15% (4)
- D4% (1)
Why each option
MAC filtering restricts network access by allowing only devices with pre-approved hardware addresses to connect, making it the most effective device-level access control listed. The other options reduce visibility but do not directly restrict which devices can join.
Turning off DHCP prevents automatic IP assignment but does not block access, as a savvy user can manually assign a valid static IP and still connect.
MAC filtering works by maintaining a whitelist of approved device hardware (MAC) addresses on the wireless router, preventing any device whose MAC address is not on the list from associating with the network. This directly controls which physical devices are permitted to connect, making it more effective than obscurity-based measures.
Disabling the DMZ affects how traffic is routed to an internal host from the internet and has no effect on which wireless clients can join the local network.
Disabling SSID broadcasting hides the network name but does not prevent access, as the SSID can still be discovered with wireless scanning tools.
Concept tested: Wireless network access control using MAC filtering
Source: https://www.comptia.org/certifications/a
Topics
Community Discussion
No community discussion yet for this question.