Optimize your success on the FSNA Readiness Exam. Engage with flashcards and multiple choice questions, each designed with hints and explanations. Prepare thoroughly for your test and excel!

Multiple Choice

Which of the following is a WLAN security measure?

The key idea here is identifying a direct access-control measure at the wireless access point. MAC filtering works by maintaining a list of approved device MAC addresses. When a device tries to connect, the AP checks its hardware address and only allows connection if the address is on the allowed list. This provides a basic barrier against unauthorized devices and is a straightforward way to tighten WLAN access on small networks. Keep in mind its limits: MAC addresses can be spoofed, and managing the list can become cumbersome in larger deployments. For stronger security, pair MAC filtering with robust encryption and authentication (like WPA2/WPA3). The other options touch security concepts but aren’t as direct a WLAN access-control measure: network authentication is broader and can refer to credential-based verification in various contexts; client isolation protects against lateral movement between clients but doesn’t by itself prevent unauthorized devices from joining; disabling SSID broadcast hides the network name but is ineffective against most attackers and is not a reliable security measure on its own.

The key idea here is identifying a direct access-control measure at the wireless access point. MAC filtering works by maintaining a list of approved device MAC addresses. When a device tries to connect, the AP checks its hardware address and only allows connection if the address is on the allowed list. This provides a basic barrier against unauthorized devices and is a straightforward way to tighten WLAN access on small networks.

Keep in mind its limits: MAC addresses can be spoofed, and managing the list can become cumbersome in larger deployments. For stronger security, pair MAC filtering with robust encryption and authentication (like WPA2/WPA3).

The other options touch security concepts but aren’t as direct a WLAN access-control measure: network authentication is broader and can refer to credential-based verification in various contexts; client isolation protects against lateral movement between clients but doesn’t by itself prevent unauthorized devices from joining; disabling SSID broadcast hides the network name but is ineffective against most attackers and is not a reliable security measure on its own.