An administrator has a network subnet dedicated to a group of users. Due to concerns regarding data and network security, the administrator desires to provide
network access for this group only. Which of the following would BEST address this desire?

A.
Install a proxy server between the users’ computers and the switch to filter inbound network traffic.

B.
Block commonly used ports and forward them to higher and unused port numbers.

C.
Configure the switch to allow only traffic from computers based upon their physical address.

D.
Install host-based intrusion detection software to monitor incoming DHCP Discover requests.

Explanation:
Configuring the switch to allow only traffic from computers based upon their physical address is known as MAC filtering. The physical address is known as the MAC
address. Every network adapter has a unique MAC address hardcoded into the adapter. You can configure the ports of a switch to allow connections from
computers with specific MAC addresses only and block all other MAC addresses.
MAC filtering is commonly used in wireless networks but is considered insecure because a MAC address can be spoofed. However, in a wired network, it is more
secure because it would be more difficult for a rogue computer to sniff a MAC address.
Incorrect Answers:
A: A proxy server is often used to filter web traffic. It is not used in port security or to restrict which computers can connect to a network.
B: You should not block commonly used ports. This would just stop common applications and protocols working. It would not restrict which computers can connect
to a network.
D: DHCP Discover requests are part of the DHCP process. A DHCP client will send out a DHCP Discover request to locate a DHCP server. All computers on the
network receive the DHCP Discover request because it is a broadcast packet but all computers (except the DHCP server) will just drop the packet. Blocking DHCP

Discover requests will not restrict which computers can connect to a network.

http://alliedtelesis.com/manuals/awplusv212weba/mac_address_Port_security.html