400-007 · Question #423
Virtualisation pose a special challanges for NAC because virtual servers can move aroung a data center, and the VLAN can change as servers move. What is an option that can be used to improve…
The correct answer is D. role-based control. Virtual servers moving across different physical hosts and VLANs create challenges for traditional network access control (NAC) because the network location and VLAN membership of a server can change dynamically. Role-based control assigns network access and security policies…
Question
Virtualisation pose a special challanges for NAC because virtual servers can move aroung a data center, and the VLAN can change as servers move. What is an option that can be used to improve security in this condition?
Options
- Aapplication-based security
- Bin-band traffic control
- Ctraffic encryption
- Drole-based control
How the community answered
(29 responses)- A7% (2)
- B3% (1)
- C14% (4)
- D76% (22)
Explanation
Virtual servers moving across different physical hosts and VLANs create challenges for traditional network access control (NAC) because the network location and VLAN membership of a server can change dynamically. Role-based control assigns network access and security policies based on the identity or role of the device or user rather than static network attributes like IP address or VLAN. This allows consistent enforcement of security policies regardless of where the virtual server moves within the data center. This approach improves security by ensuring that access rights and restrictions follow the workload or user, not the physical or logical network location.
Topics
Community Discussion
No community discussion yet for this question.