SY0-501 · Question #63
A network administrator wants to ensure that users do not connect any unauthorized devices to the company network. Each desk needs to connect a VoIP phone and computer. Which of the following is the…
The correct answer is A. Enforce authentication for network devices. To prevent unauthorized devices from connecting to the company network while allowing specific authorized devices, implementing network device authentication is the most effective technical solution.
Question
A network administrator wants to ensure that users do not connect any unauthorized devices to the company network. Each desk needs to connect a VoIP phone and computer. Which of the following is the BEST way to accomplish this?
Options
- AEnforce authentication for network devices
- BConfigure the phones on one VLAN, and computers on another
- CEnable and configure port channels
- DMake users sign an Acceptable use Agreement
How the community answered
(42 responses)- A83% (35)
- B2% (1)
- C5% (2)
- D10% (4)
Why each option
To prevent unauthorized devices from connecting to the company network while allowing specific authorized devices, implementing network device authentication is the most effective technical solution.
Enforcing authentication for network devices, often achieved through 802.1X Network Access Control (NAC), validates the identity of any device attempting to connect to a network port. This mechanism ensures that only authorized devices, such as the specified VoIP phones and computers with valid credentials or certificates, are granted network access, thereby preventing unauthorized hardware from connecting.
While configuring devices on separate VLANs logically segments network traffic and enhances security, it does not inherently prevent an unauthorized device from physically connecting to an access port and gaining entry to one of those VLANs if no port-level authentication is enforced.
Port channels, also known as link aggregation, are used to combine multiple physical network links into a single logical link to increase bandwidth and provide redundancy, which is unrelated to preventing unauthorized device connections.
Making users sign an Acceptable Use Agreement (AUA) is a policy-based control that defines appropriate network behavior and acts as a deterrent, but it does not technically prevent an unauthorized device from physically connecting to and accessing the network.
Concept tested: Network Access Control (NAC) and 802.1X authentication
Source: https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-802-1x-authentication
Topics
Community Discussion
No community discussion yet for this question.