Question
A client wants to increase overall security after a recent breach. Which of the following would be best to implement? (Choose two.)
- A. Least privilege network access Correct
- B. Dynamic inventories
- C. Central policy management Correct
- D. Zero-touch provisioning
- E. Configuration drift prevention
- F. Subnet range limits
Explanation
Least privilege network access limits each user and device to only the resources it needs, shrinking what an attacker can reach after a breach. Central policy management applies consistent security policies across the whole network from one place, closing gaps left by inconsistent configurations. Dynamic inventories and zero-touch provisioning are automation conveniences rather than security controls, configuration drift prevention mainly keeps devices matching a baseline, and subnet range limits do not by themselves restrict access.
