Which statement best defines MAC filtering in wireless networks?

Which statement best defines MAC filtering in wireless networks?

• A. A security method that controls access based on MAC addresses, allowing only specified devices to connect.
• B. A technique for encrypting wireless traffic using MAC addresses.
• C. A method to assign IP addresses to devices based on MAC.
• D. A feature that blocks all wireless connections unless a VPN is used.

Answer: (A)

MAC filtering is a security control on wireless networks that lets the access point permit or deny connectivity based on the device’s MAC address. Each network interface has a unique hardware address, and with MAC filtering you create a list of allowed addresses. Only devices whose MAC addresses are on that list can connect, while others are blocked. But this approach isn’t foolproof. MAC addresses can be spoofed, so an attacker can mimic an allowed device. It also doesn’t protect the actual traffic—encryption like WPA2/WPA3 is still needed for secure communications. Because it’s hard to manage for many devices and provides only limited protection, MAC filtering is best used as an extra, not primary, security measure. The other statements don’t fit MAC filtering: encryption isn’t done via MAC addresses, IP assignment by MAC describes DHCP reservations (not filtering), and requiring a VPN for all connections describes a different security model altogether.

MAC filtering is a security control on wireless networks that lets the access point permit or deny connectivity based on the device’s MAC address. Each network interface has a unique hardware address, and with MAC filtering you create a list of allowed addresses. Only devices whose MAC addresses are on that list can connect, while others are blocked.

But this approach isn’t foolproof. MAC addresses can be spoofed, so an attacker can mimic an allowed device. It also doesn’t protect the actual traffic—encryption like WPA2/WPA3 is still needed for secure communications. Because it’s hard to manage for many devices and provides only limited protection, MAC filtering is best used as an extra, not primary, security measure.

The other statements don’t fit MAC filtering: encryption isn’t done via MAC addresses, IP assignment by MAC describes DHCP reservations (not filtering), and requiring a VPN for all connections describes a different security model altogether.