Network Access Control Deployment Quiz

1. What is the primary advantage of using certificate-based authentication in NAC?

It is faster than password-based authentication

It provides strong device identity verification and mutual authentication

It requires no server infrastructure

It eliminates the need for encryption

2. What role does a 'supplicant' play in 802.1X NAC authentication?

It manages the network switch

It is the client device requesting network access

It encrypts all network traffic

It replaces the firewall

3. Which of the following best describes 'dynamic access control' in NAC?

Static rules that never change

Access privileges that adjust based on real-time device posture and context

Manual approval for every connection

Allowing all devices unrestricted access

4. What is the purpose of a 'compliance baseline' in NAC?

To measure network speed

To define minimum security requirements devices must meet

To track user login patterns

To manage software licenses

5. Which of the following is a common NAC integration point with existing security infrastructure?

Integration with SIEM for logging and alerting

Integration with email servers only

Integration with social media platforms

Integration with user calendars

6. In NAC, what does 'network segmentation' accomplish?

It increases total bandwidth

It isolates compliant from non-compliant devices and limits lateral movement

It eliminates the need for authentication

It prevents all external connections

7. Which security standard often defines compliance requirements checked by NAC systems?

HTML5 specifications

PCI DSS, HIPAA, or SOC 2 compliance frameworks

TCP/IP standards only

User interface design guidelines

8. What is a key limitation of agentless NAC solutions?

They require installation on every device

They cannot assess devices that don't respond to network queries

They are too expensive for most organizations

They only work on Windows systems

9. Which NAC deployment model is best for organizations with BYOD (Bring Your Own Device) policies?

Agentless NAC only

Hybrid NAC combining agent and agentless approaches

No NAC implementation

Agent-based NAC exclusively

10. In NAC architecture, which component makes decisions about network access?

The network switch

The NAC policy server

The user's device

The ISP router

11. What is the primary purpose of Network Access Control (NAC) in an enterprise network?

To encrypt all traffic between network nodes

To enforce security policies and ensure only compliant devices access the network

To replace firewalls entirely

To manage bandwidth allocation across users

12. Which network segment would typically be assigned to non-compliant devices in NAC?

The main production network

A quarantine or remediation VLAN

The guest network without restrictions

The DMZ exclusively

13. What is the role of a NAC agent in endpoint compliance?

Encrypting user credentials

Collecting device posture information and reporting compliance status

Replacing antivirus software

Managing firewall rules

14. Which endpoint security component is typically checked during NAC posture assessment?

Antivirus software status and definitions

User login frequency

Network bandwidth usage

Monitor refresh rate

15. In NAC, what does 'remediation' mean?

Blocking all network traffic

Bringing non-compliant devices into compliance

Permanently disconnecting devices

Resetting user passwords

16. Which protocol is used for device authentication in 802.1X port-based NAC?

RADIUS or TACACS+

SNMP only

DNS exclusively

HTTP Basic Authentication

17. What is the primary benefit of implementing a post-admission NAC strategy?

Faster initial network access for all users

Continuous monitoring and remediation of non-compliant devices

Elimination of the need for firewalls

Reduced authentication overhead

18. Which of the following is a pre-admission NAC approach?

Quarantine non-compliant devices after network access

Enforce compliance requirements before granting network access

Allow access first, then audit devices

Restrict access based on time of day only

19. In NAC deployment, what does the term 'posture checking' refer to?

Physical inspection of network hardware

Verification that devices meet security compliance requirements

Monitoring user behavior patterns

Checking the physical position of network cables

20. Which authentication method is most commonly integrated with NAC systems?

802.1X port-based authentication

Telnet credentials

MAC address only verification

IP address whitelisting

Network Security Engineer Deploying Network Access Control Quiz