Which feature monitors connections to reduce infection risks?

• A. Endpoint Access Enforcement
• B. Network Firewall
• C. Threat Detection
• D. Access Control

Answer: (A)

Monitoring connections to reduce infection risk hinges on deciding, for each device, whether it is healthy enough to access network resources. Endpoint Access Enforcement does this by checking the device’s posture every time it tries to connect—things like antivirus status, patch level, and other health indicators—and then allowing, quarantining, or remediation-based access based on that check. This proactive control stops noncompliant or potentially infected devices from reaching resources, which directly lowers the chance of infections spreading across the network.

A network firewall filters traffic between networks, which is important for blocking unwanted traffic, but its primary role isn’t to assess or enforce the health state of every endpoint at connection time. Threat detection looks for malware or suspicious activity after a connection is already established, rather than preventing risky connections in the first place. Access control governs who or what can connect in general, but Endpoint Access Enforcement provides the health-based, real-time checks that specifically limit connections to reduce infection risk.