User and device security in the Cisco Security Reference Architecture primarily focuses on:

Question

Options

• APhysical access controls
• BNetwork segmentation
• CAuthentication and endpoint protection
• DCloud storage encryption

• A
  6% (3)
• B
  2% (1)
• C
  90% (44)
• D
  2% (1)

Explanation

Authentication and endpoint protection (C) sit at the core of the User and Device security domain in Cisco's Security Reference Architecture because this layer is specifically concerned with who is accessing the network and what devices they're using - verified through identity management (like Cisco ISE) and secured through endpoint controls (like Cisco AMP/Secure Endpoint).

Why the others are wrong:

• A (Physical access controls) belongs to a facilities/physical security domain, not the logical user/device layer.
• B (Network segmentation) is a network security concern - it controls where traffic flows, not who or what initiates it.
• D (Cloud storage encryption) falls under data security or cloud security pillars, not user/device security.

Memory tip: Think "U&D = ID" - User and Device security is really about Identity and Defense of the endpoint. If the answer involves verifying a person or locking down a machine, it's C.

No community discussion yet for this question.