CompTIA Network+

Answer: C - A network-based firewall can provide MAC address filtering services

Key takeaway: A network-based Intrusion Prevention System is designed to monitor protocol activity for suspicious traffic and attempt to prevent a malicious attack. A Network based IDS is simply an Intrusion Detection System that is designed to monitor for the same thing, however is only designed to notify of, and not respond to, an identified threat or attack. A network based proxy server is designed to respond to requests for resources, but not necessarily access packet filtering, or MAC address filtering. The network based firewall is designed to do just that, and more.