NAC marks a contractor laptop non-compliant during posture check on…

Question

NAC marks a contractor laptop non-compliant during posture check on the city employee SSID. What network design element best supports remediation?

Accepted Answer

Place the device on a quarantine VLAN with limited access to remediation resources until posture passes. — Failed posture means time-out, not free-for-all. Drop non-compliant gear on a quarantine VLAN with just enough reach to get healthy. Full access, SCADA shortcuts, and sticker patrols are not NAC.

Answer

Grant full VLAN access immediately so the laptop can download malware patches from peer PCs.

Answer

Bridge the laptop into the SCADA VLAN where scanners are less aggressive.

Answer

Disable NAC and rely on the lobby greeter to inspect antivirus stickers.

NAC marks a contractor laptop non-compliant during posture check on the city employee SSID. What network design element best supports remediation?

Short Explanation

Full Explanation