Which statement best describes a limitation of MAC filtering?

Which statement best describes a limitation of MAC filtering?

• A. MAC filtering blocks all devices from joining the network.
• B. MAC filtering requires a password from the user to connect.
• C. Devices can spoof MAC addresses and bypass filtering.
• D. MAC filtering encrypts all wireless traffic.

Answer: (C)

MAC filtering relies on the device’s hardware address to decide who can join the network. The key limitation is that this address can be changed or forged. A device on the same wireless segment can set its network interface to use a legitimate or whitelisted MAC, effectively impersonating an approved device and bypassing the filter. Since MAC addresses are not cryptographically protected and can be easily spoofed, MAC filtering offers only a weak form of access control. Some devices also randomize MACs for privacy, which further undermines reliability. Because this control doesn’t provide encryption or strong authentication, it should not be relied on as the primary security measure; stronger protections like WPA2/WPA3 with solid authentication are needed.

MAC filtering relies on the device’s hardware address to decide who can join the network. The key limitation is that this address can be changed or forged. A device on the same wireless segment can set its network interface to use a legitimate or whitelisted MAC, effectively impersonating an approved device and bypassing the filter. Since MAC addresses are not cryptographically protected and can be easily spoofed, MAC filtering offers only a weak form of access control. Some devices also randomize MACs for privacy, which further undermines reliability. Because this control doesn’t provide encryption or strong authentication, it should not be relied on as the primary security measure; stronger protections like WPA2/WPA3 with solid authentication are needed.