Question

Which of the scenarios below might justify using a MAC address spoofing tool when connecting to your company's network? (Select two.)

answer

A new web server that is for internal-only use has a firewall that only allows a list of six devices to access resources. You need to verify all other MAC addresses are blocked.


You set up the rules for blocking MAC addresses but got a new laptop and haven't had time to update the allowed list to include its wireless card.


Your IT director has banned all personal devices from accessing the wireless network, but you use your own laptop for work. Getting an exception for your device, however, is taking too long.


Your personal Android phone is used by you to accept forwarded phone calls from your desk. You need to spoof a MAC address on the device since only devices on the list of allowed MACs have access according to policy.


You want to test the list of banned MAC addresses on your network.

Answer 1

Answers: 1 and 5.

Reason: Using MAC spoofing is justifiable for authorized testing/auditing (verifying the firewall blocks other MACs or testing the banned-MAC list). The other scenarios describe bypassing policy or gaining unauthorized access to resources, which is not an appropriate use. Always get proper authorization before spoofing on a corporate network.