350-401 Question 286
Select 4A company is designing its enterprise network security architecture. The requirements include segmenting the network to limit access between departments, protecting sensitive data from external threats, and monitoring traffic for malicious activities. Which combination of components would best address these requirements?
- A
Firewalls to enforce access control policies
- B
Network Access Control (NAC) to authenticate and authorize devices
- C
Intrusion Prevention Systems (IPS) to detect and block malicious traffic
- D
Dynamic Host Configuration Protocol (DHCP) to assign IP addresses
- E
Virtual LANs (VLANs) to segment network traffic
Show answer and explanation
Correct answers: A, B, C, E
Explanation
A well-designed network security architecture requires multiple components to address diverse threats and requirements. Firewalls, NAC, IPS, and VLANs collectively provide access control, segmentation, threat detection, and mitigation capabilities. DHCP, while important in network operation, does not directly contribute to security design.
- A. Correct.
Firewalls are essential for defining and enforcing access control policies between network segments and protecting against unauthorized access.
- B. Correct.
Network Access Control (NAC) ensures that only authorized devices can access the network and applies policies based on authentication.
- C. Correct.
Intrusion Prevention Systems (IPS) detect and prevent malicious traffic, protecting the network from external threats.
- D. Incorrect.
Dynamic Host Configuration Protocol (DHCP) is used for assigning IP addresses but does not contribute to network security design.
- E. Correct.
Virtual LANs (VLANs) help segment the network, reducing the scope of potential attacks and limiting access between different departments.