Question 523 of 750

Logical Security Concepts →easyMultiple ChoiceObjective-mapped

MAC Address Filtering as a Logical Security Control

This 220-1202 practice question tests your understanding of logical security concepts. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

A small business wants to ensure that only authorized employees can access the file server from their laptops. Each laptop has a unique hardware ID. Which logical security method should be implemented to enforce this restriction?

A
Require a complex password for the file server share.
Why wrong: Passwords authenticate users, not devices; any user with credentials could access from any laptop.
B
Enable MAC address filtering on the network switch or router.
MAC filtering ties access to the specific hardware addresses of the laptops, meeting the requirement.
C
Install a host-based firewall on each laptop.
Why wrong: Host firewalls protect the laptop itself but do not control which devices can reach the file server.
D
Disable the guest account on the file server.
Why wrong: Disabling guest accounts prevents anonymous access but does not restrict access to specific laptops.

Full breakdown with real-world context →

Quick Answer

The answer is to enable MAC address filtering on the network switch or router. This logical security control works by checking each device’s unique Media Access Control (MAC) address—the hardware ID burned into its network interface—against an allowlist, granting access only to authorized laptops. On the CompTIA A+ Core 2 220-1202 exam, this question tests your understanding of basic network access controls versus stronger methods like 802.1X or certificate-based authentication; a common trap is confusing MAC filtering with physical security or IP-based restrictions. Remember that MAC addresses can be spoofed, so this is a lightweight, not a high-security, solution. Memory tip: think “MAC = Machine Access Card”—it’s like a bouncer checking IDs at the door, but the IDs can be faked.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Enable MAC address filtering on the network switch or router.

MAC address filtering on the network switch or router allows the administrator to create an access control list (ACL) that permits only specific hardware MAC addresses to connect to the network. Since each laptop has a unique hardware ID (MAC address), this method directly ties network access to the authorized devices, ensuring only those laptops can reach the file server. This is a logical security control implemented at Layer 2 of the OSI model.

Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Require a complex password for the file server share.
Why it's wrong here
Passwords authenticate users, not devices; any user with credentials could access from any laptop.
✓
Enable MAC address filtering on the network switch or router.
Why this is correct
MAC filtering ties access to the specific hardware addresses of the laptops, meeting the requirement.
Related concept
Read the scenario before looking for a memorised answer.
✗
Install a host-based firewall on each laptop.
Why it's wrong here
Host firewalls protect the laptop itself but do not control which devices can reach the file server.
✗
Disable the guest account on the file server.
Why it's wrong here
Disabling guest accounts prevents anonymous access but does not restrict access to specific laptops.

Common exam traps

Common exam trap: answer the scenario, not the keyword

The trap here is that candidates often confuse user authentication (passwords) with device authentication (MAC filtering), assuming that a strong password alone can restrict access to specific hardware, when in fact passwords only verify the user, not the device.

Detailed technical explanation

How to think about this question

MAC address filtering works by maintaining a whitelist of allowed MAC addresses in the switch or router's configuration (e.g., using 'port-security' on Cisco switches). However, MAC addresses can be spoofed via software (e.g., 'macchanger' on Linux), so this method is considered a basic security layer and not foolproof against determined attackers. In a real-world scenario, a small business might combine MAC filtering with 802.1X authentication for stronger device-level access control.

KKey Concepts to Remember

Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.

TExam Day Tips

Watch for words such as best, first, most likely and least administrative effort.
Review why wrong options are wrong, not only why the correct option is correct.

Key takeaway

Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Real-world example

How this comes up in practice

A security administrator must allow nursing staff to reach a patient records server while blocking access from the guest Wi-Fi VLAN. After applying an extended ACL, traffic is still blocked from nursing workstations. The ACL was applied outbound instead of inbound on the wrong interface. Questions like this test ACL direction and placement rules.

Visual reference

Quick reference

OSI Model Reference

Layer	Name	PDU	Key Protocols / Devices
7	Application	Data	HTTP, HTTPS, DNS, SMTP, FTP, SSH
6	Presentation	Data	TLS / SSL, JPEG, ASCII encoding
5	Session	Data	NetBIOS, RPC, SIP
4	Transport	Segment / Datagram	TCP, UDP
3	Network	Packet	IP, ICMP, OSPF — Routers
2	Data Link	Frame	Ethernet, Wi-Fi, PPP — Switches, Bridges
1	Physical	Bits	Cables, NICs, Hubs, Repeaters

What to study next

Got this wrong? Here's your next step.

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Related 220-1202 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

Windows OS Features and Tools practice questions

Practise 220-1202 questions linked to Windows OS Features and Tools.

Windows Settings and Control Panel practice questions

Practise 220-1202 questions linked to Windows Settings and Control Panel.

Windows Command-Line Tools practice questions

Practise 220-1202 questions linked to Windows Command-Line Tools.

Windows Administrative Tools practice questions

Practise 220-1202 questions linked to Windows Administrative Tools.

macOS Features and Tools practice questions

Practise 220-1202 questions linked to macOS Features and Tools.

Linux Commands and File Permissions practice questions

Practise 220-1202 questions linked to Linux Commands and File Permissions.

Mobile OS Features and Tools practice questions

Practise 220-1202 questions linked to Mobile OS Features and Tools.

Virtualization and Cloud Technologies practice questions

Practise 220-1202 questions linked to Virtualization and Cloud Technologies.

Physical Security Controls practice questions

Practise 220-1202 questions linked to Physical Security Controls.

Logical Security Concepts practice questions

Practise 220-1202 questions linked to Logical Security Concepts.

Wireless Security Protocols practice questions

Practise 220-1202 questions linked to Wireless Security Protocols.

Malware Types and Removal practice questions

Practise 220-1202 questions linked to Malware Types and Removal.

Practice this exam

Start a free 220-1202 practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

10 questions 20 questions 30 questions 50 questions Timed 30

220-1202 practice-test guide →Study guide →Browse all practice tests

FAQ

Questions learners often ask

What does this 220-1202 question test?

Logical Security Concepts — This question tests Logical Security Concepts — Read the scenario before looking for a memorised answer..

What is the correct answer to this question?

The correct answer is: Enable MAC address filtering on the network switch or router. — MAC address filtering on the network switch or router allows the administrator to create an access control list (ACL) that permits only specific hardware MAC addresses to connect to the network. Since each laptop has a unique hardware ID (MAC address), this method directly ties network access to the authorized devices, ensuring only those laptops can reach the file server. This is a logical security control implemented at Layer 2 of the OSI model.

What should I do if I get this 220-1202 question wrong?

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

What is the key concept behind this question?

Read the scenario before looking for a memorised answer.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Same concept, more angles

1 more ways this is tested on 220-1202

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. A small business wants to ensure that only authorized employees can access the file server from their laptops. Each laptop has a unique MAC address. Which security measure should be implemented on the network switch?

easy

A.Disable SSID broadcast
B.Enable WPA3 encryption
✓ C.Configure MAC filtering
D.Change the default admin password

Why C: Option C is correct because MAC filtering on a network switch allows the administrator to create an access control list (ACL) that permits or denies traffic based on the source MAC address. By configuring the switch to allow only the MAC addresses of authorized employee laptops, the small business can restrict file server access to those specific devices, even if they connect via a wired Ethernet port.

Keep practising

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.