100-150 Question 256
Select 3Your company has implemented a network policy that requires all devices to authenticate before connecting to the network. A technician notices unauthorized devices gaining access and suspects a security misconfiguration. Which of the following measures can help prevent unauthorized devices from connecting to the network?
- A
Implement 802.1X authentication on network switches.
- B
Disable Dynamic Host Configuration Protocol (DHCP) on the network.
- C
Enable MAC address filtering on the access points.
- D
Use strong passwords for Wi-Fi Protected Access (WPA2).
- E
Configure VLAN segmentation for guest and internal devices.
Show answer and explanation
Correct answers: A, C, D
Explanation
Preventing unauthorized devices requires measures that enforce authentication or restrict access. 802.1X ensures devices authenticate before connecting, MAC address filtering restricts connections to approved devices, and strong WPA2 passwords secure wireless access. Disabling DHCP and VLAN segmentation can improve security but do not directly address unauthorized device access.
- A. Correct.
802.1X authentication enforces device authentication before granting network access, making it an effective measure to prevent unauthorized devices.
- B. Incorrect.
Disabling DHCP would primarily disrupt automatic IP assignment but does not directly prevent unauthorized access. Devices with static IPs could still connect.
- C. Correct.
MAC address filtering allows only approved MAC addresses to connect, providing an additional layer of security against unauthorized devices.
- D. Correct.
Using strong WPA2 passwords ensures that only users with the correct credentials can connect to the wireless network, helping to prevent unauthorized access.
- E. Incorrect.
VLAN segmentation separates traffic but does not directly prevent unauthorized devices from connecting to the network; it is more focused on isolating traffic.