CISM · Question #224
Which of the following is the BEST control for preventing unauthorized device access to an organization's network?
The correct answer is B. Implement network-level authentication and login to regulate access of devices to the network. Network-level authentication (e.g., 802.1X / Network Access Control) is a preventive control that actively blocks unauthorized devices from joining the network by requiring credentials or certificates before granting access. A stateful firewall (A) controls traffic between…
Question
Which of the following is the BEST control for preventing unauthorized device access to an organization's network?
Options
- AInstall a stateful inspection firewall to prevent unauthorized network traffic.
- BImplement network-level authentication and login to regulate access of devices to the network.
- CEstablish a review schedule for logs from an automated asset inventory discovery tool.
- DKeep an inventory of network and hardware addresses of all systems connected to the network.
How the community answered
(46 responses)- A9% (4)
- B74% (34)
- C13% (6)
- D4% (2)
Explanation
Network-level authentication (e.g., 802.1X / Network Access Control) is a preventive control that actively blocks unauthorized devices from joining the network by requiring credentials or certificates before granting access. A stateful firewall (A) controls traffic between network segments but doesn't stop an unauthorized device from connecting. Log reviews (C) and hardware inventory (D) are detective controls - they identify what is connected but do not prevent unauthorized connections from occurring in the first place.
Topics
Community Discussion
No community discussion yet for this question.