An organization wants to enforce network access controls based on the health posture of connecting endpoints. Which technology BEST enables this capability?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — a is correct because NAC with posture assessment evaluates endpoint health (patch level, AV status, encryption) before granting network access and can quarantine non-compliant devices. B is wrong because VLAN tagging is a traffic separation mechanism, not a health-based access control.
Full explanation below image
Full Explanation
A is correct because NAC with posture assessment evaluates endpoint health (patch level, AV status, encryption) before granting network access and can quarantine non-compliant devices. B is wrong because VLAN tagging is a traffic separation mechanism, not a health-based access control. C is wrong because DAI protects against ARP spoofing, not endpoint posture enforcement. D is wrong because PVLANs restrict communication between hosts in the same VLAN but do not assess endpoint health.