nerdexam
Isaca

CISM · Question #224

Which of the following is the BEST control for preventing unauthorized device access to an organization's network?

The correct answer is B. Implement network-level authentication and login to regulate access of devices to the network. Network-level authentication (e.g., 802.1X / Network Access Control) is a preventive control that actively blocks unauthorized devices from joining the network by requiring credentials or certificates before granting access. A stateful firewall (A) controls traffic between…

Submitted by saadiq_pk· Apr 18, 2026Information Security Program Development and Management

Question

Which of the following is the BEST control for preventing unauthorized device access to an organization's network?

Options

  • AInstall a stateful inspection firewall to prevent unauthorized network traffic.
  • BImplement network-level authentication and login to regulate access of devices to the network.
  • CEstablish a review schedule for logs from an automated asset inventory discovery tool.
  • DKeep an inventory of network and hardware addresses of all systems connected to the network.

How the community answered

(46 responses)
  • A
    9% (4)
  • B
    74% (34)
  • C
    13% (6)
  • D
    4% (2)

Explanation

Network-level authentication (e.g., 802.1X / Network Access Control) is a preventive control that actively blocks unauthorized devices from joining the network by requiring credentials or certificates before granting access. A stateful firewall (A) controls traffic between network segments but doesn't stop an unauthorized device from connecting. Log reviews (C) and hardware inventory (D) are detective controls - they identify what is connected but do not prevent unauthorized connections from occurring in the first place.

Topics

#Network Access Control#Device Security#Preventative Controls#Authentication

Community Discussion

No community discussion yet for this question.

Full CISM Practice