100-160 Question 105
Select 3A company has recently deployed a network access control (NAC) solution to ensure that only authorized and compliant devices can connect to their internal network. During testing, the IT team notices that unauthorized devices are still able to access certain network resources. Which of the following actions should the team take to fix this issue?
- A
Verify that the NAC policies are properly configured to block unauthorized devices.
- B
Ensure the firewall rules are updated to restrict access to sensitive resources.
- C
Implement an Access Control List (ACL) to explicitly deny unauthorized devices at the network level.
- D
Disable the VPN to prevent remote access to the network.
- E
Check if unauthorized devices are spoofing MAC addresses to bypass NAC.
Show answer and explanation
Correct answers: A, C, E
Explanation
To resolve the issue, the IT team needs to ensure that NAC policies are correctly configured to enforce device compliance, use ACLs to explicitly deny unauthorized devices at the network level, and investigate potential MAC address spoofing attempts. These actions address the root causes of the problem while ensuring the NAC solution operates as intended.
- A. Correct.
NAC relies on properly configured policies to identify and block unauthorized devices. If policies are not correctly set up, unauthorized devices may still gain access.
- B. Incorrect.
While firewalls are important for network security, updating firewall rules alone does not directly address NAC-related issues. This is not the best solution in this scenario.
- C. Correct.
An ACL can be used to enforce access restrictions at the network level, complementing the NAC solution by explicitly denying access to unauthorized devices.
- D. Incorrect.
Disabling the VPN is not a solution to the problem described. It would prevent legitimate remote users from accessing the network but would not address unauthorized devices connecting locally.
- E. Correct.
MAC address spoofing can be used to bypass NAC enforcement. Identifying and mitigating this tactic is crucial for ensuring NAC effectiveness.