Which of the following terminals is most suitable for MAC authentication?

Question

Options

• APC running Windows system for office use
• BPC running Linux system used for testing
• CMobile clients for daily use, such as smartphones, etc.
• DNetwork printer

• A
  4% (1)
• B
  8% (2)
• C
  15% (4)
• D
  73% (19)

Explanation

Network printers are the ideal candidates for MAC Authentication Bypass (MAB) because they are "dumb" devices - they have no user interface, cannot run 802.1X supplicant software, and cannot present credentials like a username/password or certificate. MAB uses the device's fixed, known MAC address as its sole identifier to grant network access, which is exactly the right fit for such headless, non-interactive endpoints.

Why the distractors are wrong:

• A & B (Windows/Linux PCs): Both operating systems natively support 802.1X EAP authentication with full credential support, making MAC auth unnecessary and less secure for them.
• C (Smartphones): Mobile devices support 802.1X and certificate-based auth; more critically, modern smartphones randomize their MAC addresses for privacy, making MAC authentication unreliable and ineffective.

Memory tip: Ask yourself "Can this device type a password?" - if not (printers, IP phones, IoT sensors, badge readers), it needs MAB. If yes, use stronger 802.1X authentication instead.

No community discussion yet for this question.