Which filter looks at options in DISCOVER or REQUEST and makes allow/deny decisions based on those options (for example Option 60)?

• A. MAC Address Filter
• B. Option Filter
• C. NAC Filter
• D. Relay Agent Filter

Answer: (B)

Filtering based on DHCP options in DISCOVER or REQUEST messages is about inspecting the content of the DHCP options field to enforce policy. The Option Filter is designed for this purpose because it examines the options within those DHCP messages (such as the vendor class identifier, Option 60) and applies allow/deny decisions based on their values. Other filters focus on different parts of the DHCP transaction: a MAC Address Filter uses the client’s hardware address to decide access, not the options; NAC Filter handles broader network access control decisions; Relay Agent Filter looks at relay agent information rather than the options themselves. So the Option Filter is the right choice when decisions hinge on the options present in DISCOVER or REQUEST messages.