nerdexam
Cisco

400-007 · Question #423

Virtualisation pose a special challanges for NAC because virtual servers can move aroung a data center, and the VLAN can change as servers move. What is an option that can be used to improve…

The correct answer is D. role-based control. Virtual servers moving across different physical hosts and VLANs create challenges for traditional network access control (NAC) because the network location and VLAN membership of a server can change dynamically. Role-based control assigns network access and security policies…

Designing Security

Question

Virtualisation pose a special challanges for NAC because virtual servers can move aroung a data center, and the VLAN can change as servers move. What is an option that can be used to improve security in this condition?

Options

  • Aapplication-based security
  • Bin-band traffic control
  • Ctraffic encryption
  • Drole-based control

How the community answered

(29 responses)
  • A
    7% (2)
  • B
    3% (1)
  • C
    14% (4)
  • D
    76% (22)

Explanation

Virtual servers moving across different physical hosts and VLANs create challenges for traditional network access control (NAC) because the network location and VLAN membership of a server can change dynamically. Role-based control assigns network access and security policies based on the identity or role of the device or user rather than static network attributes like IP address or VLAN. This allows consistent enforcement of security policies regardless of where the virtual server moves within the data center. This approach improves security by ensuring that access rights and restrictions follow the workload or user, not the physical or logical network location.

Topics

#NAC#virtualization#role-based access control#data center security

Community Discussion

No community discussion yet for this question.

Full 400-007 Practice