An organization has implemented a protection strategy to secure the network from unauthorized external access. The new Chief Information Security Officer (CISO) wants to increase security by better pr

An application firewall filters traffic based on application-layer content and is primarily used to protect applications from attack, not to control which internal devices are permitted to connect to the network infrastructure.

Port security is a NAC capability implemented at the network switch level that restricts which devices can connect to a physical or logical port, typically by limiting or binding allowed MAC addresses. This directly addresses unauthorized internal access by preventing rogue or unrecognized devices from gaining network connectivity, even when someone has physical access to an internal network jack or switch port.

Strong passwords are an authentication hardening measure that protect account credentials but do not prevent an unauthorized device from physically connecting to an internal network port.

Two-factor authentication strengthens user identity verification during login but does not constitute a NAC capability that controls network port access for unauthorized internal devices.