nerdexam
Cisco

300-320 · Question #208

A well-designed IP addressing scheme supporting role-based functions within the subnet will result in the most efficient use of which technology?

The correct answer is D. ACLs. Organizing subnets by functional role enables ACLs to permit or deny entire address ranges efficiently, reducing the number of ACE entries required.

Advanced Addressing and Routing Solutions

Question

A well-designed IP addressing scheme supporting role-based functions within the subnet will result in the most efficient use of which technology?

Options

  • ALayer 3 switching in the core
  • BNetwork Admission Control (NAC)
  • CIP telephony (voice and video) services
  • DACLs

How the community answered

(29 responses)
  • A
    3% (1)
  • C
    3% (1)
  • D
    93% (27)

Why each option

Organizing subnets by functional role enables ACLs to permit or deny entire address ranges efficiently, reducing the number of ACE entries required.

ALayer 3 switching in the core

Layer 3 core switching efficiency is improved through route summarization and topology design, not specifically through role-based IP addressing within subnets.

BNetwork Admission Control (NAC)

NAC enforces admission based on identity, posture, and policy regardless of how IP addresses are structured; role-based addressing does not directly improve NAC efficiency.

CIP telephony (voice and video) services

IP telephony efficiency comes primarily from QoS marking, dedicated VLANs, and call admission control - not from role-based IP address assignment.

DACLsCorrect

When IP addresses are allocated based on device role or function (servers, clients, VoIP, management), security policies can be expressed as single ACL entries matching entire subnets rather than individual hosts or disparate ranges, resulting in smaller, easier-to-maintain ACLs that are applied consistently across the network.

Concept tested: Role-based IP addressing for efficient ACL design

Source: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/Baseline_Security/securebasebook/sec_chap3.html

Topics

#IP addressing design#ACLs#role-based subnetting#access control

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice