Staff from the sales department have administrator rights to their corporate standard operating environment, and often connect their work laptop to customer networks when onsite during meetings and presentations. This increases the risk and likelihood of a security incident when the sales staff reconnects to the corporate LAN. Which of the following controls would BEST protect the corporate network?

Question

Accepted Answer

A. Implement a network access control (NAC) solution that assesses the posture of the laptop NAC enforces automated endpoint compliance checks - such as patch level, antivirus status, and host firewall state - every time a device attempts to connect, ensuring that a laptop potentially exposed to threats on a customer network is evaluated and quarantined or remediated before it can communicate with internal corporate resources.

Answer

B. Use an independent consulting firm to provide regular network vulnerability assessments Periodic vulnerability assessments identify weaknesses at a point in time but do not provide real-time enforcement when a potentially compromised laptop reconnects to the corporate network.

Answer

C. Provide sales staff with a separate laptop with no administrator access just for sales visits. Providing a separate laptop reduces exposure risk but is operationally expensive and does not technically prevent a contaminated device from eventually reconnecting to internal systems.

Answer

D. Update the acceptable use policy and ensure sales staff read and acknowledge the policy. Updating the acceptable use policy changes expected behavior on paper but provides no technical enforcement and cannot prevent a compromised laptop from introducing malware onto the network.

Staff from the sales department have administrator rights to their corporate standard operating environment, and often connect their work laptop to customer networks when onsite during meetings and…

Question

Options

How the community answered

Why each option

Topics

Community Discussion