100-160 Question 103
Select 2Your company has implemented a VPN for secure remote access and a firewall to monitor incoming and outgoing traffic. Recently, unauthorized devices have been detected on the company network. To address this issue, the IT team plans to enforce device authentication and ensure only approved devices can connect. Which combination of technologies should be used to achieve this goal?
- A
Configure a Network Access Control (NAC) system to enforce device compliance
- B
Update the firewall rules to block all traffic from unauthorized IP addresses
- C
Enable an Access Control List (ACL) to allow traffic only from approved MAC addresses
- D
Utilize the VPN client to require user authentication and device verification
- E
Disable the VPN entirely to prevent remote access
Show answer and explanation
Correct answers: A, D
Explanation
To address unauthorized devices, a combination of technologies is needed to enforce both device compliance and secure remote access. Network Access Control (NAC) ensures that only compliant, authorized devices can connect to the network. Additionally, configuring the VPN to require both user authentication and device verification adds an extra layer of security for remote access. Together, these solutions effectively mitigate the issue of unauthorized devices while maintaining secure connectivity.
- A. Correct.
Network Access Control (NAC) can enforce device compliance by verifying the device's identity and ensuring it meets security policies before granting access to the network. This is an effective solution for addressing unauthorized devices.
- B. Incorrect.
While updating firewall rules may help in blocking some unauthorized traffic, firewalls typically operate at the network level and do not enforce device-specific authentication or compliance.
- C. Incorrect.
Access Control Lists (ACLs) can control network traffic to specific devices, but managing MAC addresses at scale is not practical and does not verify device compliance.
- D. Correct.
VPNs can provide secure remote access and, when configured properly, can be used to verify both user credentials and device compliance, making this a suitable approach to enforce secure access.
- E. Incorrect.
Disabling the VPN would block legitimate remote users from accessing the network and would not resolve the issue of unauthorized devices already connected.