300-420 · Question #362
An architect is designing how the company will manage the infrastructure of a large data center. The company wants to group device types for security reasons and mitigate DoS attacks. The company…
The correct answer is A. out-of-band Ethernet. The company needs a secure management infrastructure for a data center, segregating management traffic, mitigating DoS, and preventing production network access upon management plane compromise.
Question
An architect is designing how the company will manage the infrastructure of a large data center. The company wants to group device types for security reasons and mitigate DoS attacks. The company also wants to ensure that access to the rest of the production network is not possible if one device is compromised on the management plane. Which solution must the architect choose?
Options
- Aout-of-band Ethernet
- Bout-of-band dial-up circuit
- Cin-band Ethernet
- Din-band dial-up circuit
How the community answered
(32 responses)- A84% (27)
- B6% (2)
- C3% (1)
- D6% (2)
Why each option
The company needs a secure management infrastructure for a data center, segregating management traffic, mitigating DoS, and preventing production network access upon management plane compromise.
An out-of-band Ethernet management solution isolates management traffic onto a dedicated network, ensuring that compromise of a management device does not provide access to the production network and protects against DoS attacks on the production network affecting manageability. This dedicated network typically uses separate physical interfaces and cabling from the data plane.
An out-of-band dial-up circuit is a legacy solution that provides isolation but is slow, expensive, and impractical for managing a large data center infrastructure with modern requirements.
In-band Ethernet management uses the same network interfaces and pathways as the production data, making it vulnerable to DoS attacks on the production network and allowing access to the production network if the management plane is compromised.
An in-band dial-up circuit suffers from the same isolation issues as in-band Ethernet and the scalability and performance issues of dial-up, making it unsuitable for modern data center management.
Concept tested: Out-of-band management benefits
Source: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/DC_Infra2_5/DCInfra_1.html
Topics
Community Discussion
No community discussion yet for this question.