Which of the following can be implemented if a security administrator wants only certain devices connecting to the wireless network?

Disabling SSID broadcast makes the network name hidden but does not prevent any device from connecting once the SSID is known or discovered.

A RADIUS server provides centralized authentication (typically credential or certificate-based) but is a broader solution not specifically designed to restrict access by individual device identity.

MAC filtering is configured directly on the wireless access point or controller and restricts network association to a defined list of device hardware addresses. When an unrecognized device attempts to connect, the AP rejects the association request, providing a device-identity-based access restriction that targets specific endpoints rather than just hiding or limiting the network.

Lowering AP power levels shrinks the coverage area but does not restrict which specific devices can connect within that area.