試験CAS-005-JPN トピック2 問題178 スレッド
CompTIA CAS-005-JPNのリアル試験問題集
問題 #: 178
トピック #: 2
問題 #: 178
トピック #: 2
ギャップアセスメントにおいて、ある組織はOYOD（個人所有デバイス）の使用が重大なリスクであると指摘しました。組織はBYODの使用を禁止する管理ポリシーを導入しましたが、組織のリソースへのアクセス時にBYOD資産の不正使用を防ぐための技術的管理策は導入されていません。OYODデバイスのリスクを軽減するために、組織が導入すべきソリューションは次のうちどれですか（2つ選択してください）。
おすすめの解答：B,C 解答を投票する
To reduce the risk of unauthorized BYOD (Bring Your Own Device) usage, the organization should implement Conditional Access and Network Access Control (NAC).
Why Conditional Access and NAC?
Conditional Access:
User-to-Device Binding: Conditional access policies can enforce that only registered and compliant devices are allowed to access corporate resources.
Context-Aware Security: Enforces access controls based on the context of the access attempt, such as user identity, device compliance, location, and more.
Network Access Control (NAC):
DeviceConfiguration Requirements: NAC ensures that only devices meeting specific security configurations are allowed to connect to the network.
Access Control: Provides granular control over network access, ensuring that BYOD devices comply with security policies before gaining access.
Other options, while useful, do not address the specific need to control and secure BYOD devices effectively:
A . Cloud IAM to enforce token-based MFA: Enhances authentication security but does not control device compliance.
D . PAM to enforce local password policies: Focuses on privileged account management, not BYOD control.
E . SD-WAN to enforce web content filtering: Enhances network performance and security but does not enforce BYOD device compliance.
F . DLP to enforce data protection capabilities: Protects data but does not control BYOD device access and compliance.
Reference:
CompTIA SecurityX Study Guide
"Conditional Access Policies," Microsoft Documentation
"Network Access Control (NAC)," Cisco Documentation
Why Conditional Access and NAC?
Conditional Access:
User-to-Device Binding: Conditional access policies can enforce that only registered and compliant devices are allowed to access corporate resources.
Context-Aware Security: Enforces access controls based on the context of the access attempt, such as user identity, device compliance, location, and more.
Network Access Control (NAC):
DeviceConfiguration Requirements: NAC ensures that only devices meeting specific security configurations are allowed to connect to the network.
Access Control: Provides granular control over network access, ensuring that BYOD devices comply with security policies before gaining access.
Other options, while useful, do not address the specific need to control and secure BYOD devices effectively:
A . Cloud IAM to enforce token-based MFA: Enhances authentication security but does not control device compliance.
D . PAM to enforce local password policies: Focuses on privileged account management, not BYOD control.
E . SD-WAN to enforce web content filtering: Enhances network performance and security but does not enforce BYOD device compliance.
F . DLP to enforce data protection capabilities: Protects data but does not control BYOD device access and compliance.
Reference:
CompTIA SecurityX Study Guide
"Conditional Access Policies," Microsoft Documentation
"Network Access Control (NAC)," Cisco Documentation
Nakamur 2026-07-27 11:21:33
コメント
他人の解答コメントを賛成するのも、その解答に一票を入れることになります。したがって、すでに同じ意見の投票コメントが存在する場合、新規コメントをする代わりに賛成することもできます。
コメントを通報する
コメント中
今すぐ 新規登録 / ログイン （無料です）。