CISSP Practice Question: A retail company is implementing a NAC solution to ensure devices meet…

Correct Answer: A. Endpoint Posture Assessment

Explanation (CISSP Manager Logic):

Managers use posture assessments to enforce security baselines before granting network trust. This ensures all endpoints meet minimum safety requirements like patch levels and antivirus status, reducing the risk of lateral movement by non-compliant devices.

By implementing this solution, you:

• Automate compliance verification for diverse device types.
• Mitigate risks associated with BYOD and guest access.
• Enable automated remediation or isolation of non-compliant assets.

While the other options are relevant, they fall short because:

• B: Port security limits access based on MAC addresses but cannot inspect internal security configurations or patch levels.
• C: VPNs provide secure encrypted tunnels for remote connectivity but do not inherently validate endpoint health.
• D: NAT maps IP addresses for routing and provides no mechanism for security policy enforcement or compliance checking.

Think like a manager:

Prioritize proactive risk reduction by ensuring that device health is a prerequisite for connectivity. Security must be verified before access is granted to protect the broader environment.