An organization wants to enforce network access controls based on the health posture of connecting endpoints. Which technology BEST enables this capability?
Select an answer to reveal the explanation.
Short Explanation
You need Network Access Control (NAC) with posture assessment because it checks endpoint health—patch level, AV status, encryption—before granting network access and can quarantine non-compliant devices. VLAN tagging, Dynamic ARP Inspection, and Private VLANs don’t make health-based access decisions.
Full Explanation
Network Access Control (NAC) with posture assessment is correct because it evaluates endpoint health, such as patch level, antivirus status, and encryption, before granting network access and can quarantine non-compliant devices. 802.1Q VLAN tagging is wrong because VLAN tagging is a traffic separation mechanism, not a health-based access control. Dynamic ARP Inspection (DAI) is wrong because DAI protects against ARP spoofing, not endpoint posture enforcement. Private VLANs (PVLANs) are wrong because PVLANs restrict communication between hosts in the same VLAN but do not assess endpoint health.