Question
A network architect must ensure only certain departments can access specific resources while on premises. Those same users cannot be allowed to access those resources once they have left campus. Which of the following would ensure access is provided according to these requirements?
- A. Enabling MFA for only those users within the departments needing access
- B. Configuring geofencing with the IPs of the resources Correct
- C. Configuring UEBA to monitor all access to those resources during non-business hours
- D. Implementing a PKI-based authentication system to ensure access
Explanation
Geofencing ties access to a location, so access to the resources is allowed only from the campus network and refused once a user is off site. MFA and PKI prove who the user is but work the same from anywhere, and UEBA only monitors and alerts on behavior rather than enforcing a location-based restriction.
