Exam CAS-004 topic 1 question 583 discussion

A. NAC (Network Access Control) ✅ • Performs posture assessments before allowing device access • Can enforce policies (e.g., quarantine, deny, limited access) based on device posture • Supports guest access workflows • Ideal for wired or wireless networks ✅ Meets requirement 1 (posture assessment) ⸻ E. NIPS (Network Intrusion Prevention System) ✅ • Monitors network traffic for anomalous or malicious activity • Can be configured to alert before blocking or taking automated action • Especially useful for detecting threats on wireless networks ✅ Meets requirements 2 & 3 (abnormal behavior detection + alerting)

A. NAC (Network Access Control): NAC is designed to enforce security policies on devices before granting them network access. It can perform posture assessments, ensuring that devices meet specific security criteria (e.g., antivirus installed, OS up to date) before they are allowed onto the network. This aligns with the CIO’s requirement that visitors’ devices undergo a posture assessment before accessing the Wi-Fi. C. WLC (Wireless LAN Controller): The WLC manages the wireless network and can be configured to enforce security policies, including scanning for abnormal behavior in wireless traffic. This is important because the security team needs to be notified if there is any unusual behavior on the network, as outlined in the scenario.