100-160 Question 104
Single answerA company has recently experienced multiple unauthorized access attempts to its internal network. The security team decides to implement additional measures. They configure an access control list (ACL) on their firewall to block traffic from specific IP ranges and set up a VPN with multi-factor authentication (MFA) for remote employees. However, unauthorized devices are still being connected to the internal network. Which solution should the security team implement to address this issue?
- A
Enable Network Access Control (NAC) to enforce device compliance policies.
- B
Expand the existing ACL to include MAC address filtering for internal devices.
- C
Implement a stronger encryption protocol for the VPN.
- D
Increase the logging level on the firewall to monitor internal traffic.
Show answer and explanation
Correct answer: A
Explanation
The issue of unauthorized devices connecting to the internal network requires a solution that can assess and enforce compliance on all devices before granting access. Network Access Control (NAC) is specifically designed to ensure that only authorized and compliant devices are allowed to connect, making it the appropriate solution in this scenario.
- A. Correct.
Network Access Control (NAC) ensures that only compliant devices (e.g., those with proper security patches and configurations) can connect to the network. This directly addresses the issue of unauthorized devices being connected.
- B. Incorrect.
ACLs are effective for controlling traffic based on IP addresses or other parameters, but they are not designed to evaluate the compliance of devices or enforce security policies for connected devices.
- C. Incorrect.
Implementing a stronger encryption protocol for the VPN enhances the security of remote access but does not address unauthorized devices connecting to the internal network.
- D. Incorrect.
Increasing the logging level on the firewall helps with monitoring and identifying malicious activities but does not proactively prevent unauthorized devices from connecting.