Certified Information Systems Security Professional CISSP · Free Practice Question Medium
Question 113
Your company is in the process of implementing a robust Network Access Control (NAC) system to strengthen its defenses against unauthorized access. As part of the setup, you're reviewing various security policies that govern how endpoint devices interact with the corporate network. In particular, there is a focus on compliance with internal security standards before granting network access. What NAC principle mandates that endpoint devices be compliant with security policies BEFORE being permitted to access any network resources?
- A Pre-admission
- B Pre-registration
- C Post-registration
- D Post-admission
Reveal correct answer
Correct answer: A
Explanation
OBJ. 4.2 - Pre-admission NAC ensures that devices are thoroughly inspected and meet all security compliance requirements before they are allowed to access network resources. This is crucial in preventing compromised or non-compliant devices from causing security incidents. In contrast, post-admission NAC applies checks after the device has gained access, which poses a greater risk as the device may already be interacting with sensitive systems. For support or reporting issues, include Question ID: 67d9681322f03b67bc784a1f in your ticket. Thank you.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
