An administrator has a network subnet dedicated to a group of users. Due to concerns regarding
data and network security, the administrator desires to provide network access for this group only.
Which of the following would BEST address this desire?

A.
Install a proxy server between the users’ computers and the switch to filter inbound network
traffic.

B.
Block commonly used ports and forward them to higher and unused port numbers.

C.
Configure the switch to allow only traffic from computers based upon their physical address.

D.
Install host-based intrusion detection software to monitor incoming DHCP Discover requests.

Explanation:
Configuring the switch to allow only traffic from computers based upon their physical address is
known as MAC filtering. The physical address is known as the MAC address. Every network
adapter has a unique MAC address hardcoded into the adapter.
You can configure the ports of a switch to allow connections from computers with specific MAC
addresses only and block all other MAC addresses.
MAC filtering is commonly used in wireless networks but is considered insecure because a MAC
address can be spoofed. However, in a wired network, it is more secure because it would be more
difficult for a rogue computer to sniff a MAC address.