What does NAC stand for?
NAC stands for Network Access Control. A system that checks who and what is connecting before granting network access, typically through 802.1X with a RADIUS server, and can inspect device posture (patches, antivirus). Non-compliant or unknown devices are denied or placed in a quarantine VLAN.
NAC decides whether a device may join the network and what it may reach once it has. It checks identity, with a certificate or user credentials, and often posture: is the operating system patched, is endpoint protection running, is the disk encrypted. A device that fails is refused or placed in a quarantine network where it can only reach the update servers. NAC commonly relies on 802.1X at the switch port or the wireless access point and can use an agent on the device or check it without one.
NAC in practice: an example
A contractor plugs a personal laptop into a wall socket in a meeting room. The switch port asks for credentials, the NAC server finds no company certificate and the laptop is placed in the guest VLAN with internet access only. An employee laptop that is three months behind on patches lands in a remediation VLAN until it has updated.
What NAC is confused with
NAC vs 802.1X: what is the difference?
802.1X is the standard that makes a port ask for authentication before it passes traffic. NAC is the complete solution built on it: identity, posture checks, policy and quarantine.
NAC vs firewall: what is the difference?
A firewall filters traffic between networks. NAC acts earlier, at the point where a device connects, and decides whether the device belongs on the network at all.
Which exams cover NAC?
NAC is on the official CompTIA acronym list for one of the four exams covered here.
- Network+ N10-009: 4.0 (Network Security).
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. A company wants unpatched laptops to be kept off the production network until they have installed updates. Which control does this?
- NAC with posture assessment
- A longer DHCP lease
- Port mirroring
- A larger subnet
Show the answer
A. NAC with posture assessment. Posture assessment checks the state of the device at connection time and can place a non-compliant device in a remediation network.
2. A device fails the NAC health check. What is the usual outcome?
- It receives administrator rights
- It is moved to a quarantine or remediation network
- Its MAC address is deleted from the switch forever
- It becomes the default gateway
Show the answer
B. It is moved to a quarantine or remediation network. A quarantine network lets the device reach only what it needs to become compliant, such as patch servers, and nothing else.
Sources: NIST glossary: network access control; IEEE 802.1X-2020: Port-Based Network Access Control. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.