220-802 · Question #779
A SOHO has had several issues with various unauthorized devices consuming the network's bandwidth. There are only four network devices that are authorized to access the Internet as well as the local…
The correct answer is D. MAC filtering. MAC filtering creates an explicit whitelist of allowed hardware addresses, blocking all unlisted devices - including unauthorized ones - from accessing the network.
Question
A SOHO has had several issues with various unauthorized devices consuming the network's bandwidth. There are only four network devices that are authorized to access the Internet as well as the local LAN's resources. Which of the following security implementations would MOST likely help disable network access to the unauthorized devices?
Options
- AUsing complex passwords
- BDisabling the use of static IP addresses
- CDisabling ports
- DMAC filtering
How the community answered
(31 responses)- A10% (3)
- B3% (1)
- D87% (27)
Why each option
MAC filtering creates an explicit whitelist of allowed hardware addresses, blocking all unlisted devices - including unauthorized ones - from accessing the network.
Complex passwords strengthen authentication credentials but do not prevent a device that already has the wireless password from connecting.
Disabling static IP addresses has no effect on network access; unauthorized devices can still receive an IP from DHCP and connect normally.
Disabling switch ports could block wired connections to specific ports but does not control which wireless devices can associate with the access point.
MAC filtering on the router or access point allows the administrator to specify the exact MAC addresses of the four authorized devices and deny all others. When an unauthorized device attempts to connect, its MAC address is not in the approved list and access is denied, directly preventing bandwidth consumption.
Concept tested: SOHO network access control using MAC address filtering
Source: https://www.cisco.com/c/en/us/support/docs/smb/wireless/cisco-small-business-100-series-wireless-access-points/smb5831-how-to-configure-mac-address-filtering-on-wap125-and-wap581.html
Topics
Community Discussion
No community discussion yet for this question.