- Get link
- X
- Other Apps
CYB 205 Infrastructure Administration
Q: Kolin is searching for a network security solution that will allow him to help reduce zero-day attacks while using identities to enforce a security policy on systems before they connect to the network. What type of solution should Kolin implement?
A: NAC system
Explanation: Kolin should implement the NAC (network access control) system that can be used to authenticate users and then validate their system's compliance with a security standard before they are allowed to connect to the network. Enforcing security profiles can help reduce zero-day attacks, making NAC a useful solution.Answers A and C are incorrect because a firewall can't enforce system security policies, whereas an intrusion detection system can only monitor for attacks and alarm when they happen. Thus, neither a firewall nor an intrusion detection system (IDS) meets Kolin's needs.Answer D is incorrect because port security is a MAC address-based security feature that can restrict only which systems or devices can connect to a given port.
- Get link
- X
- Other Apps
Comments
Post a Comment