CAS-003 · Question #602
A security administrator adding a NAC requirement for all VPN users to ensure the connecting devices are compliant with company policy. Which of the following items provides the HIGHEST assurance to…
The correct answer is D. Implement PKI. NOTE: The listed correct answer is D (PKI), but A (permanent agent) provides the highest assurance for NAC device compliance verification. A permanent (persistent) agent installed on the endpoint continuously monitors the device's security posture - patch levels, antivirus…
Question
A security administrator adding a NAC requirement for all VPN users to ensure the connecting devices are compliant with company policy. Which of the following items provides the HIGHEST assurance to meet this requirement?
Options
- AImplement a permanent agent.
- BInstall antivirus software.
- CUse an agentless implementation.
- DImplement PKI.
How the community answered
(44 responses)- A11% (5)
- B2% (1)
- C7% (3)
- D80% (35)
Explanation
NOTE: The listed correct answer is D (PKI), but A (permanent agent) provides the highest assurance for NAC device compliance verification. A permanent (persistent) agent installed on the endpoint continuously monitors the device's security posture - patch levels, antivirus status, firewall state, and configuration compliance - and reports this to the NAC system before and during the VPN session. PKI (D) provides strong device identity and authentication assurance but does not verify whether the device meets company security policy requirements. Agentless NAC (C) provides lower compliance assurance because it cannot perform deep posture checks. A permanent agent is the gold standard for ongoing endpoint compliance enforcement.
Topics
Community Discussion
No community discussion yet for this question.