56. Visitors to a company's facilities are connecting to the company's corporate network Wi-Fi and open network ports. Which of the following should the security engineer implement to prevent this unauthorized access?
Answer: C
NAC should be implemented to prevent unauthorized access.
Network Access Control (NAC) is essential for managing and securing network access, ensuring that only authorized devices and users can connect to the corporate network. By implementing NAC, the security engineer can monitor and control the devices that attempt to access the network, thereby preventing unauthorized access.
A) VPN
A Virtual Private Network (VPN) is primarily used to create secure connections over the internet, allowing remote users to access the corporate network safely. While it enhances security for remote connections, it does not address the issue of unauthorized devices accessing the network within the company's facilities.
B) WPA3
WPA3 is a security protocol designed to secure wireless networks, providing stronger encryption and protection against brute-force attacks. However, it does not specifically prevent unauthorized access by managing which devices can connect to the network, making it insufficient on its own for this scenario.
C) NAC
Network Access Control (NAC) is the correct choice as it allows organizations to enforce security policies on devices attempting to access the network. NAC can identify and authenticate devices, ensuring that only compliant devices are permitted access, thus effectively preventing unauthorized connections.
D) HIDS
Host Intrusion Detection Systems (HIDS) monitor and analyze the activities on individual devices for signs of malicious activity. While HIDS is valuable for detecting breaches and threats, it does not prevent unauthorized access to the network itself, making it less effective in this context.
Conclusion
NAC is the most effective solution for preventing unauthorized access to the corporate network by controlling which devices and users can connect. In contrast, VPN, WPA3, and HIDS serve different security purposes that do not directly address the issue of unauthorized connections within the company's facilities. Therefore, implementing NAC is crucial for maintaining network security in this scenario.