200-301 Question 414
Select 3A network administrator is configuring access control for a company's network. The goal is to ensure that only employees with specific roles can access certain devices and applications. Which of the following methods would BEST accomplish this objective?
- A
Implement role-based access control (RBAC) on the network devices.
- B
Configure port security on all switch ports to limit device access.
- C
Use access control lists (ACLs) to permit or deny traffic based on IP addresses and protocols.
- D
Deploy a centralized RADIUS server for authentication and authorization.
- E
Enable open access on all VLANs to simplify connectivity.
Show answer and explanation
Correct answers: A, C, D
Explanation
To achieve the objective of restricting access to devices and applications based on user roles, the administrator should use a combination of RBAC for role-based permissions, ACLs for granular traffic control, and a centralized RADIUS server for authentication and authorization. These methods together provide a secure and structured approach to access control. Port security and open VLAN access do not address the role-based access requirements.
- A. Correct.
Role-based access control (RBAC) is a method that assigns permissions based on user roles, making it effective for restricting access to specific devices and applications.
- B. Incorrect.
Port security is used to restrict access at the physical port level, but it does not provide role-based or fine-grained application control.
- C. Correct.
Access control lists (ACLs) are commonly used to define and enforce traffic flow rules based on IP addresses, protocols, and ports, which can help restrict access to devices and applications.
- D. Correct.
A centralized RADIUS server provides authentication, authorization, and accounting (AAA) services and ensures that only authorized users can access network resources.
- E. Incorrect.
Enabling open access on all VLANs would allow unrestricted access, which directly contradicts the objective of limiting access based on roles.