SY0-301 · Question #719
An auditor is given access to a conference room to conduct an analysis. When they connect their laptop's Ethernet cable into the wall jack, they are not able to get a connection to the Internet but…
The correct answer is C. Network Access Control. Network Access Control (NAC) enforces security policy compliance before granting network access, which can result in a physical link but no routed connectivity for non-compliant or unauthorized devices.
Question
An auditor is given access to a conference room to conduct an analysis. When they connect their laptop's Ethernet cable into the wall jack, they are not able to get a connection to the Internet but have a link light. Which of the following is MOST likely causing this issue?
Options
- AEthernet cable is damaged
- BThe host firewall is set to disallow outbound connections
- CNetwork Access Control
- DThe switch port is administratively shutdown
How the community answered
(47 responses)- A6% (3)
- B17% (8)
- C72% (34)
- D4% (2)
Why each option
Network Access Control (NAC) enforces security policy compliance before granting network access, which can result in a physical link but no routed connectivity for non-compliant or unauthorized devices.
A damaged Ethernet cable would typically prevent a link light from illuminating, so this contradicts the observation of a lit link light.
A host-based firewall on the auditor's laptop could block outbound traffic, but this would not be a typical default state and does not explain being blocked at the infrastructure level.
NAC solutions authenticate and evaluate endpoints against security policies before permitting them onto the network. A laptop that is not registered, not compliant, or not authenticated will receive a link-layer connection (explaining the link light) but will be blocked from accessing network resources or the internet. This is the most logical explanation when physical connectivity is confirmed but logical access is denied.
An administratively shutdown switch port would not pass electrical signals and therefore would not produce a link light on the connected device.
Concept tested: Network Access Control blocking unauthorized endpoint access
Source: https://www.cisco.com/c/en/us/products/security/identity-services-engine/what-is-network-access-control.html
Topics
Community Discussion
No community discussion yet for this question.