A system that checks a device is approved and healthy before letting it join your network.
Like a front-desk visitor check: you sign in, show ID and get a badge, and no badge means the door stays shut.
Is NAC overkill for a small office?
Usually. A separate guest network and a staff network with a strong password gets most of the benefit.
Every WILDCARD card exists to solve one named problem. Find yours.