CAS-003 · Question #450
A network printer needs Internet access to function. Corporate policy states all devices allowed on the network must be authenticated. Which of the following is the MOST secure method to allow the…
The correct answer is D. Issue a certificate to the printer and use certificate-based authentication. Certificate-based authentication allows a device like a printer to authenticate to the network using a digital certificate without requiring human credentials, satisfying the policy requirement while remaining practical. It is the most secure device-level authentication method…
Question
A network printer needs Internet access to function. Corporate policy states all devices allowed on the network must be authenticated. Which of the following is the MOST secure method to allow the printer on the network without violating policy?
Options
- ARequest an exception to the corporate policy from the risk management committee
- BRequire anyone trying to use the printer to enter their username and password
- CHave a help desk employee sign in to the printer every morning
- DIssue a certificate to the printer and use certificate-based authentication
How the community answered
(42 responses)- A12% (5)
- B5% (2)
- C5% (2)
- D79% (33)
Why each option
Certificate-based authentication allows a device like a printer to authenticate to the network using a digital certificate without requiring human credentials, satisfying the policy requirement while remaining practical. It is the most secure device-level authentication method available.
Requesting a policy exception bypasses the security requirement rather than meeting it, increasing risk without providing any technical control.
Requiring users to enter credentials to use the printer authenticates the person, not the device, and does not satisfy a policy requiring all devices on the network to be authenticated.
Having a help desk employee sign in daily is a manual, non-scalable workaround that still authenticates a person rather than the device itself, and leaves the printer unauthenticated for most of the day.
Issuing an X.509 certificate to the printer and configuring the network (e.g., via 802.1X) to require certificate-based authentication enables the device to prove its identity cryptographically without relying on shared passwords or human intervention. This approach complies with the corporate authentication policy, is scalable, and does not expose user credentials.
Concept tested: Certificate-based device authentication for network access control
Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-certificates-plan
Topics
Community Discussion
No community discussion yet for this question.