Q33Security Design
An architect receives a functional requirement for a NAC system from a customer security policy stating that, if a corporate Wi-Fi device does not meet current AV definitions, it must not access the corporate network until the definitions are updated. Which component should be incorporated into the NAC design?
← → navigate · a answer
Community votes
Discussion · 1
A 5
Selected Answer: A
The other options (B, C, and D) are tied to NAC capabilities, but they do not directly meet the requirement of blocking network access based on the compliance status of AV definitions. They cover other parts of network access control, such as using security group tags (SGTs) and dynamic access control lists (dACLs) for segmentation, and quarantine VLANs for isolating non-compliant devices, but they may not line up exactly with the given requirement.