Allied services have recently purchased NAC devices to detect and prevent non-company owned devices from attaching to their internal wired and wireless network. Corporate devices will be automatically added to the approved device list by querying Active Directory for domain devices. Non-approved devices will be placed on a protected VLAN with no network access. The NAC also offers a web portal that can be integrated with Active Directory to allow for employee device registration which will not be utilized in this deployment. Which of the following recommendations would make NAC installation more secure?
Suggested Answer: C
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
KI
Kirk
11 months ago
Changing the wireless password seems a bit overkill after NAC setup.
RI
Rima
11 months ago
Daily inventory updates from AD? Definitely a must!
RO
Rosio
12 months ago
Wait, why wouldn't they use the device registration feature? Seems odd.
MI
Mica
12 months ago
I think disabling the web portal is a smart move.
LA
Lashonda
12 months ago
Sounds like a solid plan with the NAC devices!
VI
Vilma
1 year ago
Changing the wireless password after implementing NAC sounds like a basic security measure, but I wonder if it's really necessary if the NAC is already in place.
BE
Bettina
1 year ago
I feel like disabling the web portal is a good idea since we're not using it, but I'm not completely confident if that alone would enhance security.
PI
Pilar
1 year ago
I remember a practice question about updating inventories; configuring Active Directory to push updates daily seems like it would keep the NAC current.
LI
Lili
1 year ago
I'm not entirely sure, but I think enforcing company configuration standards for personal devices could help prevent vulnerabilities.
MA
Mari
1 year ago
I think I've got this one. The key is to define an SLA for Vulnerability Response, so I'd go with option D - make sure I have the right role and use the baseline SLA Application Modules.
AL
Alexia
1 year ago
Hmm, I'm not sure about this one. I'll have to think it through carefully to make sure I get the right component.
DA
Darrin
1 year ago
Hmm, I'm a bit unsure about the difference between the risk strategies here. I'll need to think this through carefully.
MI
Milly
1 year ago
C looks good to me. Credit card statements reveal business connections and contacts, which could be super useful in an investigation.