400-007: Cisco Certified Design ExpertDemo

By Cisco · Question Mode

QuestionQ33

Security Design

An architect receives a functional requirement for a NAC system from a customer security policy stating that, if a corporate Wi-Fi device does not meet current AV definitions, it must not access the corporate network until the definitions are updated. Which component should be incorporated into the NAC design?

  • A posture assessment with remediation VLAN
  • B quarantine SGTs
  • C dACLs with SGTs
  • D quarantine VLAN
Explanation

Posture assessment evaluates endpoint antivirus compliance, including whether AV definitions are current. A remediation VLAN confines a noncompliant endpoint to limited remediation access so it can update its definitions before being granted normal corporate-network access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!