Which two best practices must be followed when designing an out-of-band management network? (Choose two.)

Question

Options

• AEnforce access control
• BFacilitate network integration
• CBack up data using the management network
• DEnsure that the management network is a backup to the data network
• EEnsure network isolation

• A
  88% (57)
• B
  2% (1)
• C
  8% (5)
• D
  3% (2)

Explanation

An out-of-band (OOB) management network is a dedicated network used exclusively for device management (console, SSH, SNMP, etc.), physically or logically separate from the production data plane. Two essential best practices are: Enforce access control (A) - strict authentication, authorization, and accounting must be applied to the management network to ensure only authorized administrators can access managed devices, since a compromised management network gives an attacker control over the entire infrastructure. Ensure network isolation (E) - the management network must be isolated from the production network so that a data-plane compromise cannot pivot into management plane access. Options B and D contradict the purpose of isolation. Option C (using the management network for data backups) would introduce production traffic into the management plane, defeating its purpose and creating security and capacity risks.

No community discussion yet for this question.