Simplest Wireless Device Access Control for Small Networks
Short answer
B MAC filtering allows a network administrator to restrict wireless access by whitelisting specific hardware addresses, which is the simplest method for a small, static group of devices.
Question
Key Takeaways
The trap is confusing 'access control' with 'network security'; MAC filtering is an access control list at the link layer, but it is operationally simpler than router-based ACLs for small Wi-Fi setups.
For a small wireless network with few devices and no changes expected, MAC filtering is the simplest way to limit access compared to ACLs or NAC solutions.
Common mistake: Choosing ACLs because they sound like 'access control', but forgetting that implementing them on a small wireless network is administratively heavier than using the AP's built-in MAC filter.
Expert Analysis
The question specifies a small wireless network (less than ten laptops) with no anticipated changes. The goal is to limit connectivity, and the constraint is simplicity.
MAC Filtering vs. ACLs: While both can restrict access, MAC filtering (Option B) is a feature built directly into most consumer and small-business wireless access points (APs). It involves simply adding MAC addresses to an allow-list or deny-list on the AP's interface. This requires zero additional hardware or complex configuration. In contrast, ACLs (Option A) typically refer to Layer 3/Layer 4 filters applied on routers or firewalls. Implementing ACLs for device-level wireless access control often requires more complex setup (e.g., VLAN tagging, RADIUS integration, or specific AP-ACL support) which is overkill for a static group of ten devices.
Other Options: NAC (Option C) is enterprise-grade, requiring servers, agents, and significant infrastructure—far too complex for this scenario. Trusted zones (Option D) are a conceptual firewall concept, not a specific mechanism for limiting individual device connections on a Wi-Fi network.
The community comment supporting Option B correctly identifies that for a small, static environment, manual MAC address entry on the AP is the simplest administrative task.
Exam Strategy
When asked for the 'simplest' or 'most straightforward' solution in networking exams, prioritize features that are built into the primary device mentioned (like an AP) over external appliances or complex protocols. For small-scale, static environments, avoid enterprise tools like NAC unless explicitly required by security policy.
Frequently Asked Questions
Why isn't an ACL the best choice for this scenario?
Is MAC filtering secure enough for a business?
Community Votes
50% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 2 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 2
-
ERB14 👍 1 Answered BMAC Filtering: Allows or denies access to a wireless network based on the physical hardware addresses (MAC addresses) of specific devices. For a small environment (less than 10 laptops) with no anticipated changes, manually adding the MAC addresses to an access control list on the wireless access point is the simplest and most straightforward method
-
Skri113xX 👍 1 Answered AAfter eliminating the obvious incorrect choices, A is the only one left standing.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All N10-009 Questions
Access 100 questions with complete answers and detailed explanations.
View Full N10-009 Practice Test →