An administrator has configured a quarantine subnet for all guest devices that connect to the network. Which of the following would be best for the security team to perform before allowing access to…

Question

Options

• ADevice fingerprinting
• BCompliance attestation
• CPenetration test
• DApplication vulnerability test

• A
  9% (4)
• B
  85% (39)
• C
  2% (1)
• D
  4% (2)

Explanation

Compliance attestation (B) is correct because a quarantine subnet is a holding zone where guest devices are isolated until they can be verified as meeting security policy requirements - attestation confirms that a device complies with organizational standards (patching, AV, configuration) before it's granted access to corporate resources. This is the core purpose of a quarantine/NAC (Network Access Control) architecture.

Device fingerprinting (A) identifies what a device is (OS, type, vendor), but identification alone doesn't verify whether the device meets security requirements - it's a reconnaissance step, not a gate-keeping one. Penetration testing (C) is an offensive assessment of your own infrastructure's vulnerabilities; it has no role in evaluating whether a guest device should be trusted. Application vulnerability testing (D) assesses weaknesses in software applications, not the compliance posture of an endpoint seeking network access.

Memory tip: Think of the quarantine subnet as a customs checkpoint at an airport - compliance attestation is the passport check that clears you to enter, not a fingerprint scan (identification) or a security audit of the airport itself (pen test).

No community discussion yet for this question.