100-160 Question 101
Single answerA company has recently implemented a network security policy requiring only authorized devices to access their internal network. During an audit, it was discovered that unauthorized devices were able to connect to the network, even though the firewall and VPN were properly configured. Which security solution should the company implement to address this issue?
- A
Access Control Lists (ACLs)
- B
Network Access Control (NAC)
- C
Additional VPN Tunnels
- D
Web Application Firewall (WAF)
Show answer and explanation
Correct answer: B
Explanation
The correct answer is Network Access Control (NAC) because it enforces device authentication and compliance policies before granting access to the network. While other solutions like ACLs, VPNs, and WAFs are important for security, they do not specifically address the issue of unauthorized devices connecting to the network.
- A. Incorrect.
Access Control Lists (ACLs) are used to filter traffic based on IP addresses, protocols, or ports, but they cannot validate whether a device is authorized to connect to the network.
- B. Correct.
Network Access Control (NAC) ensures that only authorized and compliant devices can access the network by enforcing security policies, making it the appropriate solution for this scenario.
- C. Incorrect.
Additional VPN Tunnels provide secure communication but do not control or validate which devices are allowed to access the network.
- D. Incorrect.
Web Application Firewalls (WAFs) protect web applications by filtering and monitoring HTTP traffic, but they do not address device-level access control.