nerdexam
CompTIA

220-801 · Question #970

Joe, a user, wants to secure his home wireless network and allow only certain devices access to the network. Which of the following measures would be the MOST effective means of limiting access?

The correct answer is B. Use MAC filtering. MAC filtering restricts network access by allowing only devices with pre-approved hardware addresses to connect, making it the most effective device-level access control listed. The other options reduce visibility but do not directly restrict which devices can join.

Networking

Question

Joe, a user, wants to secure his home wireless network and allow only certain devices access to the network. Which of the following measures would be the MOST effective means of limiting access?

Options

  • ATurn off DHCP
  • BUse MAC filtering
  • CDisable DMZ
  • DTurn off SSID broadcasting

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    73% (19)
  • C
    15% (4)
  • D
    4% (1)

Why each option

MAC filtering restricts network access by allowing only devices with pre-approved hardware addresses to connect, making it the most effective device-level access control listed. The other options reduce visibility but do not directly restrict which devices can join.

ATurn off DHCP

Turning off DHCP prevents automatic IP assignment but does not block access, as a savvy user can manually assign a valid static IP and still connect.

BUse MAC filteringCorrect

MAC filtering works by maintaining a whitelist of approved device hardware (MAC) addresses on the wireless router, preventing any device whose MAC address is not on the list from associating with the network. This directly controls which physical devices are permitted to connect, making it more effective than obscurity-based measures.

CDisable DMZ

Disabling the DMZ affects how traffic is routed to an internal host from the internet and has no effect on which wireless clients can join the local network.

DTurn off SSID broadcasting

Disabling SSID broadcasting hides the network name but does not prevent access, as the SSID can still be discovered with wireless scanning tools.

Concept tested: Wireless network access control using MAC filtering

Source: https://www.comptia.org/certifications/a

Topics

#MAC filtering#wireless security#SOHO#access control

Community Discussion

No community discussion yet for this question.

Full 220-801 Practice