300-420 · Question #309
Refer to the exhibit. Which two points in the network must an engineer configure the ports for explicit trust when using a DiffServ model?
The correct answer is B. F and G. In a DiffServ model, ports connected to legitimate QoS-marking devices like IP phones or servers must be configured for explicit trust to honor their DSCP markings.
Question
Refer to the exhibit. Which two points in the network must an engineer configure the ports for explicit trust when using a DiffServ model?
Exhibit
Options
- AB and E
- BF and G
- CA and D
- DC and D
How the community answered
(29 responses)- A7% (2)
- B72% (21)
- C17% (5)
- D3% (1)
Why each option
In a DiffServ model, ports connected to legitimate QoS-marking devices like IP phones or servers must be configured for explicit trust to honor their DSCP markings.
Points B and E are typically internal network links or other access ports, but without more context on device types, they are less definitively 'explicit trust' points than F and G for legitimate QoS sources.
Ports F and G are typically configured for explicit trust when they connect to devices capable of legitimately marking traffic, such as IP phones, video conferencing endpoints, or servers that apply specific QoS markings, ensuring their traffic priorities are honored across the network.
Points A and D typically represent ports connecting to general user devices (like PCs), which are usually configured as untrusted to prevent users from arbitrarily prioritizing their own traffic.
Point C is typically an internal network link, which is generally trusted, while point D is an untrusted access port, making this combination incorrect for explicit trust.
Concept tested: DiffServ QoS trust boundaries
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/qos/configuration_guide/b_qos_3se_3850_cg/b_qos_3se_3850_cg_chapter_010.html
Topics
Community Discussion
No community discussion yet for this question.
