easyMultiple ChoiceObjective-mapped
220-1102 Practice Question: A small business wants to ensure that only…
A small business wants to ensure that only authorized employees can access the file server from their laptops. Each laptop has a unique MAC address. Which security measure should be implemented on the network switch?
⚠ Common exam trap
Watch out — candidates often confuse wireless security features (SSID, WPA3) with wired network access controls, or they mistakenly think changing the admin password restricts user access to network resources rather than just protecting the switch itself.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure MAC filtering
MAC filtering on a network switch allows the administrator to create an access control list (ACL) that permits or denies traffic based on the source MAC address. By configuring the switch to allow only the MAC addresses of authorized employee laptops, the small business can restrict file server access to those specific devices, even if they connect via a wired Ethernet port.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disable SSID broadcast
Why it's wrong here
Disabling the Service Set Identifier (SSID) broadcast merely hides the network's name from casual discovery by wireless clients. While it can deter very unsophisticated attackers, it does not prevent a determined individual from discovering the SSID through packet sniffers or other tools. Crucially, it provides no mechanism to restrict access to only authorized devices once the SSID is known, failing to meet the requirement for controlling which specific devices can connect.
- ✗
Enable WPA3 encryption
Why it's wrong here
Enabling Wi-Fi Protected Access 3 (WPA3) encryption secures the wireless communication channel by encrypting data transmitted between the access point and connected devices, and it provides robust authentication. However, WPA3's primary function is data confidentiality and integrity, along with stronger authentication protocols like Simultaneous Authentication of Equals (SAE). It does not inherently provide a mechanism to filter or restrict network access based on the unique Media Access Control (MAC) address of individual client devices.
- ✓
Configure MAC filtering
Why this is correct
Configuring MAC (Media Access Control) filtering on the wireless access point or router establishes an access control list (ACL) based on the unique hardware addresses of network interface cards. Only devices whose MAC addresses are explicitly added to this approved list will be permitted to associate with the wireless network and gain access. This method directly addresses the requirement to ensure that only specific, authorized devices can connect, effectively blocking any device with an unlisted MAC address.
- ✗
Change the default admin password
Why it's wrong here
Changing the default administrative password for the wireless router or access point is a fundamental security practice that protects the device's configuration interface from unauthorized access. This prevents malicious actors from altering network settings, including security protocols or access controls. However, securing the router's management interface does not, by itself, implement any control over which specific client devices are permitted to connect to the wireless network itself.
Visual reference
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
Learn chapter
File Systems: NTFS, FAT32, exFAT
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
MAC filtering
MAC filtering is a security practice that allows or denies network access to devices based on their unique Media Access Control (MAC) address.
About these practice questions
This 220-1202 question is part of Courseiva's 495-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.