What is the primary function of network access control (NAC)?

• A. To monitor network traffic
• B. To enforce security policies on devices accessing a network
• C. To create user accounts for network access
• D. To manage network bandwidth usage

Answer: (B)

The primary function of network access control (NAC) is to enforce security policies on devices accessing a network. This involves evaluating devices that attempt to connect to the network and ensuring they meet specific compliance requirements before granting them access. NAC systems assist in identifying devices, verifying their security status (such as antivirus presence or operating system updates), and applying appropriate controls based on predefined policies. The ultimate goal is to protect network resources by allowing only secure and compliant devices to connect, thereby reducing the risk of unauthorized access and potential threats.

In contrast, monitoring network traffic focuses on the analysis and observation of data packets traveling across the network, without necessarily enforcing policy compliance. Creating user accounts for network access pertains to user management rather than the assessment of device security. Managing network bandwidth usage is about optimizing the network performance and capacity, which does not directly relate to enforcing security policies on connecting devices.