When should MAC authentication bypass be used on a switch port?

MAC Authentication Bypass (MAB) is used for devices that cannot perform 802.1X authentication, such as IP phones, printers, or legacy devices. Instead of 802.1X, the switch sends the device's MAC address to an authentication server (like RADIUS). The server then checks if the MAC address is in its database and authorizes network access. This ensures that even non-802.1X-capable devices can be authenticated and granted appropriate network access based on their MAC address. The option about hosts supporting 802.1X is incorrect because MAB is specifically for non-802.1X devices. The option about limited 802.1X is vague and not the primary use case. The option about bypassing authentication is incorrect because MAB is a form of authentication, not a bypass of it; it authenticates based on the MAC address.