Question 59

NAC should be implemented to prevent unauthorized access.

Network Access Control (NAC) is essential for managing and securing access to the corporate network by ensuring that only authorized devices are allowed to connect. This technology can provide the necessary controls to prevent visitors from accessing sensitive parts of the network.

A) VPN

A Virtual Private Network (VPN) primarily secures remote connections over public networks by encrypting data. While it does enhance security for remote users, it does not control access at the point of entry within the corporate network itself, making it insufficient for preventing unauthorized local access.

B) WPA3

Wi-Fi Protected Access 3 (WPA3) is an encryption protocol designed to secure wireless networks. Although it provides stronger security for Wi-Fi connections, it does not address the issue of unauthorized devices connecting to the corporate network through open ports or lack of authentication mechanisms.

C) NAC

Network Access Control (NAC) is specifically designed to enforce security policies on devices attempting to connect to a network. By implementing NAC, a security engineer can authenticate devices, assess their security posture, and grant or deny access based on predefined policies, effectively preventing unauthorized access.

D) HIDS

Host Intrusion Detection Systems (HIDS) monitor and analyze the activity on individual hosts for signs of malicious activity. While HIDS can alert on potential threats, it does not prevent unauthorized access at the network level, making it less effective for the scenario described.

Conclusion

NAC is the most appropriate solution for preventing unauthorized access to a corporate network, as it provides real-time enforcement of access policies and ensures that only compliant devices can connect. Other options, while valuable in their own contexts, do not specifically address the need to control access at the network entry points, leaving the network vulnerable to unauthorized connections.