Cisco CCNP Security Core (SCOR) 350-701Visibility and EnforcementEasy
A network security engineer is tasked with implementing network access control (NAC) for a corporate campus. The solution must dynamically assign users to different VLANs and apply specific security policies based on their role, device type, and compliance posture. Which Cisco technology is designed to centralize and automate this type of policy enforcement?
- ACisco AnyConnect Secure Mobility Client
- BCisco Secure Network Analytics (Stealthwatch)
- CCisco Identity Services Engine (ISE)
- DCisco Firepower Threat Defense (FTD)
Show answer & explanationAnswer & explanation
Correct answer: C. Cisco Identity Services Engine (ISE)
Cisco Identity Services Engine (ISE) is Cisco's primary NAC solution that provides centralized policy management, allowing dynamic assignment of VLANs and security policies based on user identity, device type, and compliance checks. It performs authentication, authorization, and accounting (AAA) for network access.
Why the other options are wrong
- A. Cisco AnyConnect Secure Mobility Client is a VPN client that provides secure remote access and endpoint posture assessment, but it relies on a central policy engine like ISE for the actual NAC decisions and enforcement.
- B. Cisco Secure Network Analytics (Stealthwatch) focuses on network visibility, anomaly detection, and threat intelligence, not NAC policy enforcement.
- D. Cisco FTD is a firewall/IPS solution focused on threat prevention and network segmentation, not dynamic user/device-based network access control.
Cisco Identity Services Engine (ISE)
A network access control (NAC) solution that provides centralized and automated policy enforcement for wired, wireless, and VPN access, based on user identity, device, and compliance posture.
- Performs authentication, authorization, and accounting (AAA).
- Enables dynamic VLAN assignment and security policy application.
- Integrates with various network devices and security solutions.
Memory trick: NAC is the bouncer for your network, checking everyone's ID and dress code.