nerdexam
GIAC

GCIH · Question #238

Which of the following strategies allows a user to limit access according to unique hardware information supplied by a potential client?

The correct answer is C. MAC address filtering. MAC address filtering restricts network access based on the unique hardware address embedded in each network interface card, making it a hardware-based access control mechanism.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following strategies allows a user to limit access according to unique hardware information supplied by a potential client?

Options

  • AExtensible Authentication Protocol (EAP)
  • BWEP
  • CMAC address filtering
  • DWireless Transport Layer Security (WTLS)

How the community answered

(27 responses)
  • A
    4% (1)
  • C
    96% (26)

Why each option

MAC address filtering restricts network access based on the unique hardware address embedded in each network interface card, making it a hardware-based access control mechanism.

AExtensible Authentication Protocol (EAP)

EAP is an authentication framework supporting credential types such as certificates, tokens, and passwords, but it does not inherently use hardware-specific identifiers like MAC addresses to restrict access.

BWEP

WEP is a deprecated wireless encryption protocol used to encrypt data in transit, not a mechanism for filtering access based on client hardware information.

CMAC address filteringCorrect

Every network interface card has a globally unique MAC address burned into its hardware at the factory. MAC address filtering lets administrators configure allowlists or blocklists based on these hardware identifiers, directly controlling which physical devices can connect to a network or wireless access point regardless of credentials.

DWireless Transport Layer Security (WTLS)

WTLS is a security protocol used in WAP environments to encrypt communications between wireless clients and gateways, not a hardware-based access control filter.

Concept tested: MAC address filtering for hardware-based network access control

Source: https://www.cisco.com/c/en/us/support/docs/smb/wireless/cisco-small-business-100-series-wireless-access-points/smb5529-mac-address-filtering-on-a-wireless-access-point.html

Topics

#MAC address filtering#wireless security#access control#network authentication

Community Discussion

No community discussion yet for this question.

Full GCIH Practice