Which action might a NAC system take when a device is found to be non-compliant?

Place the device in a quarantine network with limited access

Encrypt the device's hard drive

Grant full network access immediately

Ignore the device and allow access

A company wants to implement NAC for remote access VPN users. They want to ensure that only devices that meet security policies can connect. Which approach is most effective?

Integrate NAC with the VPN gateway to perform posture checks before establishing the tunnel

Rely on the VPN client to self-report compliance

Use a captive portal for VPN users

Use only two-factor authentication

An organization wants to provide employees with access to a full Windows desktop from any device, including personal laptops and tablets. They also want to centralize desktop management and reduce the need to patch individual endpoints. Which solution best meets these needs?

Virtual Desktop Infrastructure (VDI)

Remote Desktop Protocol (RDP) directly to each employee's PC

A company needs to provide remote access to employees using personal devices. They want to ensure that the corporate network is not exposed to malware from these devices. Which VPN configuration is most appropriate?

Full-tunnel VPN with NAC integration

A company uses RADIUS for wireless authentication. They want to integrate with their existing Active Directory to authenticate users. What is the typical way to achieve this?

Configure RADIUS to forward authentication requests to Active Directory

Use Active Directory as the authenticator

Replace RADIUS with Active Directory

Install RADIUS on every client device

Systems Security Certified Practitioner

Domain 6Objective 3

6.3 - Manage Network Access Controls SSCP Practice Questions (Page 1)

Part of the Network and Communication Security domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

16%of the exam

Questions 1–5

1foundation · easy
Which action might a NAC system take when a device is found to be non-compliant?
Select an answer first
2expert · hard
A company wants to implement NAC for remote access VPN users. They want to ensure that only devices that meet security policies can connect. Which approach is most effective?
Select an answer first
3application · medium
An organization wants to provide employees with access to a full Windows desktop from any device, including personal laptops and tablets. They also want to centralize desktop management and reduce the need to patch individual endpoints. Which solution best meets these needs?
Select an answer first
4expert · hard
A company needs to provide remote access to employees using personal devices. They want to ensure that the corporate network is not exposed to malware from these devices. Which VPN configuration is most appropriate?
Select an answer first
5application · medium
A company uses RADIUS for wireless authentication. They want to integrate with their existing Active Directory to authenticate users. What is the typical way to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.