Which filter places DHCP clients into separate network segments and acts as a broker to a NAC server for authorization?

• A. MAC Address Filter
• B. Option Filter
• C. NAC Filter
• D. Relay Agent Filter

Answer: (C)

NAC Filter is designed to enforce network access control by placing DHCP clients into the appropriate network segments and consulting a NAC server for authorization. When a client requests an IP, the NAC Filter works with the NAC server (such as ISE) to evaluate the device’s posture, identity, or type and determine whether it should be granted access and which VLAN or segment it should belong to. The NAC server returns an authorization decision and the filter applies it, effectively isolating or placing the device in the correct network segment with the corresponding access rules.

This is different from other filters: a MAC Address Filter bases decisions on hardware addresses alone; an Option Filter governs which DHCP options are sent to clients; and a Relay Agent Filter handles information related to DHCP relay agents. The NAC Filter uniquely combines segmenting endpoints with brokered authorization to enforce policy at the network edge.