CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ151

VerifiedCommunication and Network Security

An organization has implemented a protection strategy to secure its network from unauthorized external access. The new Chief Information Security Officer (CISO) wants to improve security by more effectively protecting the network from unauthorized internal access. Which Network Access Control (NAC) capability BEST fulfills this objective?

Explanation

Port security limits access to a switch interface to authorized MAC addresses and identifies or blocks unapproved devices attempting to use that port. This directly restricts unauthorized internal devices from connecting to the network. Cisco documents that port security restricts interface input by limiting and identifying the MAC addresses of stations permitted to access the port.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!