300-320 · Question #208
A well-designed IP addressing scheme supporting role-based functions within the subnet will result in the most efficient use of which technology?
The correct answer is D. ACLs. Organizing subnets by functional role enables ACLs to permit or deny entire address ranges efficiently, reducing the number of ACE entries required.
Question
A well-designed IP addressing scheme supporting role-based functions within the subnet will result in the most efficient use of which technology?
Options
- ALayer 3 switching in the core
- BNetwork Admission Control (NAC)
- CIP telephony (voice and video) services
- DACLs
How the community answered
(29 responses)- A3% (1)
- C3% (1)
- D93% (27)
Why each option
Organizing subnets by functional role enables ACLs to permit or deny entire address ranges efficiently, reducing the number of ACE entries required.
Layer 3 core switching efficiency is improved through route summarization and topology design, not specifically through role-based IP addressing within subnets.
NAC enforces admission based on identity, posture, and policy regardless of how IP addresses are structured; role-based addressing does not directly improve NAC efficiency.
IP telephony efficiency comes primarily from QoS marking, dedicated VLANs, and call admission control - not from role-based IP address assignment.
When IP addresses are allocated based on device role or function (servers, clients, VoIP, management), security policies can be expressed as single ACL entries matching entire subnets rather than individual hosts or disparate ranges, resulting in smaller, easier-to-maintain ACLs that are applied consistently across the network.
Concept tested: Role-based IP addressing for efficient ACL design
Source: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/Baseline_Security/securebasebook/sec_chap3.html
Topics
Community Discussion
No community discussion yet for this question.