Security Operations Exam 3 Practice

Unauthenticated or unapproved hardware that connects to a network is something security controls like 802.1X and Network Access Control (NAC) are designed to catch and manage. The term that best fits describes devices that aren’t authorized to access resources and should be detected by these controls is rogue devices on networks.

802.1X provides port-based authentication, so a device must prove who it is before it’s allowed onto the network. NAC adds enforcement and posture checks, so if a device isn’t compliant or isn’t granted access, it can be quarantined or blocked. Rogue devices can be things like an unregistered laptop, a personal device brought onto the network, or a rogue wireless access point trying to blend in with legitimate infrastructure.

Shadow IT refers to unsanctioned apps and services, not specifically the hardware connecting to the network. Guest devices are legitimate visitors’ devices that are allowed access under controlled rules, and authorized devices are those that are approved and known.