350-401 Question 285
Select 3An enterprise network is undergoing a security redesign to better protect against external threats and ensure compliance with organizational policies. The design must include segmentation of network traffic, visibility into potential threats, and mechanisms to enforce access control. Which components should be prioritized to meet these goals?
- A
Firewalls with contextual awareness
- B
Network Access Control (NAC)
- C
Spanning Tree Protocol (STP)
- D
Intrusion Detection and Prevention Systems (IDPS)
- E
Dynamic Host Configuration Protocol (DHCP)
Show answer and explanation
Correct answers: A, B, D
Explanation
To design a secure network, prioritizing components such as firewalls, NAC, and IDPS ensures robust defenses against external threats, enforces segmentation, and provides visibility into malicious activities. These elements work together to align with the described requirements of traffic control, threat detection, and access enforcement.
- A. Correct.
Firewalls with contextual awareness provide critical perimeter security by inspecting and filtering traffic based on application, user identity, and other contextual factors, aligning with the goal of enforcing access control.
- B. Correct.
Network Access Control (NAC) ensures that only authorized devices and users can access the network, which directly supports traffic segmentation and policy enforcement.
- C. Incorrect.
Spanning Tree Protocol (STP) is a Layer 2 protocol used to prevent loops in Ethernet networks. While important for network stability, it does not directly contribute to security goals such as segmentation or access control.
- D. Correct.
Intrusion Detection and Prevention Systems (IDPS) are critical for identifying and mitigating threats within the network, offering visibility into potential threats and proactive protection.
- E. Incorrect.
Dynamic Host Configuration Protocol (DHCP) is a protocol for assigning IP addresses to devices on the network. While essential for network operation, it does not directly address the described security goals.