An engineer must design a management network for a customer's enterprise network. The design must: - provide the ability to grant and revoke access privileges - allow only protocols SSH, NTP, FTP…

In-band management shares the production network, making it much harder to isolate management interfaces or restrict access to only specific management protocols.

mGRE (Multipoint GRE) is a tunneling technology used for VPN overlays such as DMVPN, not a management network architecture.

An out-of-band (OOB) management network is physically or logically separate from the production network, allowing administrators to restrict which protocols (SSH, NTP, FTP, SNMP) can reach management interfaces via ACLs or firewall rules. It also supports role-based access control to grant and revoke privileges independently of production traffic, satisfying all three design requirements.

Enterprise internal private is not a recognized standard management network design category that addresses access privilege management and protocol restriction requirements.