GIAC GCCC Exam - Topic 5 Question 13 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 13
Topic #: 5

[All GCCC Questions]

Allied services have recently purchased NAC devices to detect and prevent non-company owned devices from attaching to their internal wired and wireless network. Corporate devices will be automatically added to the approved device list by querying Active Directory for domain devices. Non-approved devices will be placed on a protected VLAN with no network access. The NAC also offers a web portal that can be integrated with Active Directory to allow for employee device registration which will not be utilized in this deployment. Which of the following recommendations would make NAC installation more secure?

AEnforce company configuration standards for personal mobile devices

BConfigure Active Directory to push an updated inventory to the NAC daily

CDisable the web portal device registration service

DChange the wireless password following the NAC implementation

Show Suggested Answer

Suggested Answer: C

by Sage at May 05, 2022, 02:07 AM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kirk

4 months ago

Changing the wireless password seems a bit overkill after NAC setup.

upvoted 0 times

...

Rima

4 months ago

Daily inventory updates from AD? Definitely a must!

upvoted 0 times

...

Rosio

4 months ago

Wait, why wouldn't they use the device registration feature? Seems odd.

upvoted 0 times

...

Mica

4 months ago

I think disabling the web portal is a smart move.

upvoted 0 times

...

Lashonda

5 months ago

Sounds like a solid plan with the NAC devices!

upvoted 0 times

...

Vilma

5 months ago

Changing the wireless password after implementing NAC sounds like a basic security measure, but I wonder if it's really necessary if the NAC is already in place.

upvoted 0 times

...

Bettina

5 months ago

I feel like disabling the web portal is a good idea since we're not using it, but I'm not completely confident if that alone would enhance security.

upvoted 0 times

...

Pilar

5 months ago

I remember a practice question about updating inventories; configuring Active Directory to push updates daily seems like it would keep the NAC current.

upvoted 0 times

...

Lili

5 months ago

I'm not entirely sure, but I think enforcing company configuration standards for personal devices could help prevent vulnerabilities.

upvoted 0 times

...

Mari

5 months ago

I think I've got this one. The key is to define an SLA for Vulnerability Response, so I'd go with option D - make sure I have the right role and use the baseline SLA Application Modules.

upvoted 0 times

...