CCDE: Cisco Certified Design Expert (Practical) — Question 106

A security architect receives reports of these incidents:
• An attacker exploits printers and medical devices in the organization to gain control of the network.
• An attacker disrupts operations through attacks on networked business infrastructure.

What is the next step to address these issues after discovery and classification of devices?

Answer options

• A. Ensure trustworthiness of devices
• B. Assess continuous security health monitoring
• C. Apply a context-based network access control policy
• D. Enforce risk-based and adaptive access policies

Correct answer: C

Explanation

The correct answer is C because applying a context-based network access control policy helps to ensure that only authorized devices can access the network based on their context. Options A and B do not directly address the need for controlling access based on device context, while D focuses on access policies without the specific context needed for the current threats.