Automated Logical Controls for Network Defense
Question
An organization wants to implement a solution that allows for automated logical controls for network defense.
An engineer plans to select an appropriate network security component, which automates response actions based on security threats to the network.
Which of the following would be MOST appropriate based on the engineer's requirements?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D. E.A.
The engineer is looking for a network security component that provides automated logical controls for network defense and automates response actions based on security threats. Let's take a closer look at each of the options provided:
A. NIPS (Network Intrusion Prevention System) is a security solution designed to monitor network traffic for signs of malicious activity and prevent network-based attacks. However, NIPS doesn't provide automated logical controls or automated response actions.
B. HIDS (Host-based Intrusion Detection System) is a security solution designed to monitor activity on a single host for signs of malicious activity. Similar to NIPS, HIDS doesn't provide automated logical controls or automated response actions.
C. Web proxy is a security solution designed to act as an intermediary between a user and the internet, filtering traffic to prevent web-based attacks. While web proxies can provide some level of automation, they don't typically provide logical controls or automated response actions for network defense.
D. Elastic load balancer is a networking solution that distributes incoming network traffic across multiple servers to improve performance and availability. While this solution can help distribute network traffic and reduce the risk of a single point of failure, it doesn't provide any security-related automation.
E. NAC (Network Access Control) is a security solution designed to enforce security policies for devices connecting to a network. This solution can provide automated logical controls and automated response actions based on security threats to the network, making it the best option for the engineer's requirements.
Therefore, the MOST appropriate option based on the engineer's requirements is E. NAC.
