Exam CS0-002 topic 1 question 188 discussion

Comptia really like segmentation.

I was thinking the same ! CompTIA segmentation+ haha...

It is talking about machines, not users. So it is not NAC

From what I've seen so far, if either "API" or "Segmentation" is in one of the answers, that's the answer. no, but really, Segmentation makes the most sense.

From what I know NAC is able to Control access to the applications and resources users aim to access. So I am going with B.

As long as the device adheres to NAC it will let them on, which means the answer is D

NAC solutions are designed to manage the systems that connect directly to an organization's wired or wireless network. They provide excellent protection against intruders who seek to gain access to the organization's information resources by physically accessing a facility and connecting a device to the physical network. They don't provide protection against intruders seeking to gain access over a network connection. That's where firewalls enter the picture

Network segmentation, in a general sense, means clustering systems that work in a similar capacity and isolating them from other clusters. Dividing systems gives enterprises the ability to prioritize the security of networks containing highly sensitive data over those with low or even moderately sensitive data.

NAC segments endpoints on the network. This makes more sense than network segmentation. Will you have different networks to access the info? Makes more sense to have same network but segment the endpoints and what access and provileges theh have

I choose NAC. network accesss control, this is a better anseer than segmentation

looks good to me

I think the keyword here is "direct access". So may be that is why NW/segmentation is what they are looking for.

Another example of a forced question from an already thought answer. There is no mention of segmentation here https://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure but all other answers except D makes less sense

CASB works best here though. But this is COMPTIA

NW Segmentation can only accomplish this given the other options.

Network Segmentation