CNX-001 · Question #62
CNX-001 Question #62: Real Exam Question with Answer & Explanation
The correct answer is B: Configuring geofencing with the IPs of the resources. By defining an IP-based geofence around the on-premises network addresses where those resources reside, you ensure that only users connecting from inside the campus IP ranges can reach them. As soon as the same users leave that network (and thus fall outside the geofenced IP bloc
Question
A network architect must ensure only certain departments can access specific resources while on premises. Those same users cannot be allowed to access those resources once they have left campus. Which of the following would ensure access is provided according to these requirements?
Options
- AEnabling MFA for only those users within the departments needing access
- BConfiguring geofencing with the IPs of the resources
- CConfiguring UEBA to monitor all access to those resources during non-business hours
- DImplementing a PKI-based authentication system to ensure access
Explanation
By defining an IP-based geofence around the on-premises network addresses where those resources reside, you ensure that only users connecting from inside the campus IP ranges can reach them. As soon as the same users leave that network (and thus fall outside the geofenced IP block), access is automatically denied.
Topics
Community Discussion
No community discussion yet for this question.