Cisco
300-365 · Question #62
300-365 Question #62: Real Exam Question with Answer & Explanation
The correct answer is A: in-band or out-of-band deployment options. Cisco NAC Appliance provides network access control through flexible deployment, traffic enforcement, and client health checks - not intrusion detection or rogue wireless detection.
WLAN Security Deployment
Question
Which three security features can be gained by installing a Cisco NAC Appliance into the network? (Choose three.)
Options
- Ain-band or out-of-band deployment options
- Bintrusion detection
- Cbandwidth and traffic filtering controls
- Dposture assessment
- Eaccurate identification, classification, and stopping of malicious traffic
- Fdetection and containment of rogue clients
Explanation
Cisco NAC Appliance provides network access control through flexible deployment, traffic enforcement, and client health checks - not intrusion detection or rogue wireless detection.
Common mistakes.
- B. Intrusion detection is the function of an IDS/IPS device, not a NAC appliance, which focuses on access control and posture rather than monitoring traffic for attack signatures.
- E. Accurate identification and stopping of malicious traffic describes IPS functionality, not NAC - NAC controls access based on identity and posture, not real-time traffic analysis.
- F. Detection and containment of rogue clients is primarily a function of a Wireless Intrusion Prevention System (WIPS), not a NAC appliance.
Concept tested. Cisco NAC Appliance core security capabilities
Reference. https://www.cisco.com/c/en/us/products/security/nac-appliance-clean-access/index.html
Topics
#Cisco NAC#posture assessment#network admission control#OOB deployment
Community Discussion
No community discussion yet for this question.