350-401 Question 284
Select 3A company is designing a secure enterprise network for its headquarters. The IT team wants to ensure that unauthorized devices cannot access the network, malicious traffic is blocked, and sensitive data is encrypted during transmission. Which components of network security design should be implemented to meet these requirements?
- A
802.1X for device authentication
- B
Access Control Lists (ACLs) for traffic filtering
- C
Network Address Translation (NAT) for IP address management
- D
IPSec for data encryption
- E
Dynamic Host Configuration Protocol (DHCP) for IP assignment
Show answer and explanation
Correct answers: A, B, D
Explanation
A secure network design incorporates multiple components to address various aspects of security. 802.1X ensures that only authorized devices can connect to the network. ACLs are used to filter and block unwanted traffic. IPSec encrypts data to protect it during transmission. These components work together to meet the company's requirements for device authentication, traffic filtering, and data encryption.
- A. Correct.
802.1X ensures that only authenticated devices can access the network by using port-based Network Access Control, making it a critical component of secure network design.
- B. Correct.
Access Control Lists (ACLs) are used to filter and block unauthorized traffic, helping to secure the network against malicious activity.
- C. Incorrect.
Network Address Translation (NAT) is primarily used for IP address management and does not directly contribute to device authentication, traffic filtering, or data encryption.
- D. Correct.
IPSec provides encryption and integrity for data during transmission, ensuring sensitive information is protected from potential interception or tampering.
- E. Incorrect.
Dynamic Host Configuration Protocol (DHCP) is used for assigning IP addresses to devices and does not directly address security concerns like authentication, traffic filtering, or encryption.