Which feature monitors connections to reduce infection risks?

• A. Intrusion Detection
• B. Endpoint Access Enforcement
• C. Traffic Shaping
• D. Network Firewall

Answer: (B)

The idea being tested is enforcing access based on the health and policy status of endpoints to prevent infected devices from connecting to the network. Endpoint Access Enforcement continuously monitors each connection to ensure endpoints meet required security posture—such as up-to-date antivirus, patches, and policy compliance. If a device isn’t compliant, it can be blocked or placed in quarantine or redirected for remediation before it can access critical resources. This targeted control directly reduces infection risk by preventing compromised or unmanaged devices from spreading malware or accessing sensitive systems.

Intrusion Detection looks for signs of suspicious or malicious activity in traffic but does not govern whether a device can connect based on its health. Traffic Shaping manages bandwidth, not infection risk. A Network Firewall blocks or allows traffic according to rules, which helps reduce exposure but doesn’t actively monitor and enforce endpoint health or posture at the point of connection like Endpoint Access Enforcement does.