An administrator has a network subnet dedicated to a group of users. Due to concerns regarding data and
network security, the administrator desires to provide network access for this group only. Which of the following
would BEST address this desire?
Install a proxy server between the users’ computers and the switch to filter inbound network traffic.
Block commonly used ports and forward them to higher and unused port numbers.
Configure the switch to allow only traffic from computers based upon their physical address.
Install host-based intrusion detection software to monitor incoming DHCP Discover requests.
Configuring the switch to allow only traffic from computers based upon their physical address is known as MAC
filtering. The physical address is known as the MAC address. Every network adapter has a unique MAC
address hardcoded into the adapter.
You can configure the ports of a switch to allow connections from computers with specific MAC addresses only
and block all other MAC addresses.
MAC filtering is commonly used in wireless networks but is considered insecure because a MAC address can
be spoofed. However, in a wired network, it is more secure because it would be more difficult for a rogue
computer to sniff a MAC address.