nerdexam
CompTIA

N10-009 · Question #234

A company is implementing a policy that will not allow employees to bring personal devices to the office and connect to the wireless network. Which of the following is the best way to enforce this…

The correct answer is B. 802.1X. The best way to enforce a policy preventing personal devices from connecting to a wireless network is 802.1X, which provides robust, centralized authentication before granting network access.

Submitted by viktor_hu· Mar 6, 2026Network Security

Question

A company is implementing a policy that will not allow employees to bring personal devices to the office and connect to the wireless network. Which of the following is the best way to enforce this policy?

Options

  • AMAC filtering
  • B802.1X
  • CPort security
  • DACL

How the community answered

(52 responses)
  • A
    8% (4)
  • B
    71% (37)
  • C
    4% (2)
  • D
    17% (9)

Why each option

The best way to enforce a policy preventing personal devices from connecting to a wireless network is 802.1X, which provides robust, centralized authentication before granting network access.

AMAC filtering

MAC filtering is easily bypassed by MAC address spoofing and becomes cumbersome to manage in environments with many devices, making it a weak and ineffective solution for robust policy enforcement.

B802.1XCorrect

802.1X is a port-based network access control standard that provides strong authentication for devices attempting to connect to a network. It integrates with an authentication server (e.g., RADIUS) to verify user or device credentials, ensuring that only authorized and policy-compliant devices can gain access, making it highly effective for enforcing BYOD (Bring Your Own Device) policies on wireless networks.

CPort security

Port security is primarily used for wired network ports to limit or restrict which MAC addresses can connect to a specific switch port, and while it offers some control, it's less suited for comprehensive wireless network access control compared to 802.1X.

DACL

ACLs (Access Control Lists) are used to filter traffic based on criteria like IP address or port numbers once a device is already connected to the network; they do not control initial access or authentication to the network itself.

Concept tested: Network access control (NAC)

Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-802-1x-wireless-access-point-deployment

Community Discussion

No community discussion yet for this question.

Full N10-009 Practice