A security engineer is implementing network access control using 802.1X. When a non-compliant device connects, it should be placed in a restricted VLAN allowing only remediation traffic. What is this VLAN called?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — when 802.1X NAC puts a non-compliant device in a restricted VLAN, that's the quarantine or remediation VLAN. It only lets the device reach patching, antivirus, or other remediation resources until it's compliant.
Full Explanation
The quarantine VLAN, also called a remediation VLAN, is correct because in 802.1X NAC deployments non-compliant or unauthenticated devices are placed in a restricted VLAN that allows only traffic to remediation servers such as antivirus updates and patch servers while blocking access to the production network until compliance is achieved. Trunk VLANs are wrong because they carry multiple VLANs between switches and are not a restricted access category. The native VLAN is wrong because it carries untagged frames on trunk ports and is a switch configuration concept, not a NAC remediation category. The management VLAN is wrong because it is used for device management traffic such as SSH and SNMP, not for placing non-compliant endpoints.