CompTIA Security+ (SY0-701) — Question 446

Which of the following is the best way to prevent an unauthorized user from plugging a laptop into an employee's phone network port and then using tools to scan for database servers?

Answer options

• A. MAC filtering
• B. Segmentation
• C. Certification
• D. Isolation

Correct answer: A

Explanation

MAC filtering is effective because it allows only devices with specified MAC addresses to connect to the network, which prevents unauthorized access. Segmentation, while useful for limiting access to different parts of the network, does not specifically prevent unauthorized devices from connecting. Certification and Isolation are not methods directly aimed at preventing device connections in this context.