Exam CA1-005 topic 1 question 3 discussion

Actual exam question from CompTIA's CA1-005

Question #: 3
Topic #: 1

During a gap assessment, an organization notes that BYOD usage is a significant risk. The organization implemented administrative policies prohibiting BYOD usage. However, the organization has not implemented technical controls to prevent the unauthorized use of BYOD assets when accessing the organization's resources. Which of the following solutions should the organization implement to best reduce the risk of BYOD devices? (Choose two.)

A. Cloud IAM, to enforce the use of token-based MFA
B. Conditional access, to enforce user-to-device binding
C. NAC, to enforce device configuration requirements
D. PAM, to enforce local password policies
E. SD-WAN, to enforce web content filtering through external proxies
F. DLP, to enforce data protection capabilities

Show Suggested Answer

Suggested Answer: BC 🗳️

by rvv1978 at Jan. 2, 2025, 12:49 p.m.

Comments

Submit Cancel

rvv1978

4 months ago

Selected Answer: BC

Conditional Access (B) ensures only approved and compliant devices can access sensitive resources by checking the device’s identity and security context. This prevents personal BYOD devices from logging in unless they meet organizational requirements. Network Access Control (NAC) (C) enforces security policies at the network layer by assessing device health (e.g., antivirus status, patch levels) before allowing access. Devices failing to meet these requirements are blocked or quarantined, further mitigating BYOD risks.

upvoted 2 times

...

Exam CA1-005 All Questions

View all questions & answers for the CA1-005 exam

Exam CA1-005 topic 1 question 3 discussion

Comments

rvv1978

SY0-701