CV0-002 · Question #455
A company has a private cloud NAC solution in place to prevent unauthorized/non-company assets from connecting to the internal network. A cloud systems administrator cannot add a new physical server t
The correct answer is A. Server objects were deleted.. Given a NAC solution prevents unauthorized connections, the most likely reason a new physical server cannot join a cluster is the deletion or absence of its necessary server objects or policies within the NAC system. This prevents the server from gaining network access required f
Question
A company has a private cloud NAC solution in place to prevent unauthorized/non-company assets from connecting to the internal network. A cloud systems administrator cannot add a new physical server to the existing functioning cluster. Which of the following is the MOST likely cause of this issue?
Options
- AServer objects were deleted.
- BThe DNS and DHCP servers are down.
- CThe new physical server has a faulty NIC.
- DServer MAC addresses are not being updated.
How the community answered
(63 responses)- A79% (50)
- B6% (4)
- C11% (7)
- D3% (2)
Why each option
Given a NAC solution prevents unauthorized connections, the most likely reason a new physical server cannot join a cluster is the deletion or absence of its necessary server objects or policies within the NAC system. This prevents the server from gaining network access required for clustering.
If a private cloud NAC solution is in place to prevent unauthorized assets from connecting, and a new physical server cannot be added to a cluster, the most likely cause is that the NAC system does not recognize the new server as authorized. This could happen if the server's pre-registered server objects, such as its identity or policy assignments that allow it to join the network and cluster, were deleted or never created in the NAC system. Without proper authorization, the NAC solution would block the server from communicating on the network, preventing cluster formation.
While DNS and DHCP are critical for network operations, their downtime would affect all cluster members or new servers equally, and wouldn't specifically explain why a new server cannot be added due to a NAC solution.
A faulty NIC on the new server would prevent it from connecting to the network at all, but the question implies the NAC is the primary control point for unauthorized access, not basic hardware failure.
Server MAC addresses not being updated might be a symptom or an operational issue, but the root cause in a NAC context is usually related to the server's identity or policy not being correctly configured or missing in the NAC's database, which is better described by "server objects were deleted" or missing.
Concept tested: Network Access Control (NAC) impact on server cluster integration
Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-top
Topics
Community Discussion
No community discussion yet for this question.