nerdexam
Cisco

300-420 · Question #362

An architect is designing how the company will manage the infrastructure of a large data center. The company wants to group device types for security reasons and mitigate DoS attacks. The company…

The correct answer is A. out-of-band Ethernet. The company needs a secure management infrastructure for a data center, segregating management traffic, mitigating DoS, and preventing production network access upon management plane compromise.

Network Services

Question

An architect is designing how the company will manage the infrastructure of a large data center. The company wants to group device types for security reasons and mitigate DoS attacks. The company also wants to ensure that access to the rest of the production network is not possible if one device is compromised on the management plane. Which solution must the architect choose?

Options

  • Aout-of-band Ethernet
  • Bout-of-band dial-up circuit
  • Cin-band Ethernet
  • Din-band dial-up circuit

How the community answered

(32 responses)
  • A
    84% (27)
  • B
    6% (2)
  • C
    3% (1)
  • D
    6% (2)

Why each option

The company needs a secure management infrastructure for a data center, segregating management traffic, mitigating DoS, and preventing production network access upon management plane compromise.

Aout-of-band EthernetCorrect

An out-of-band Ethernet management solution isolates management traffic onto a dedicated network, ensuring that compromise of a management device does not provide access to the production network and protects against DoS attacks on the production network affecting manageability. This dedicated network typically uses separate physical interfaces and cabling from the data plane.

Bout-of-band dial-up circuit

An out-of-band dial-up circuit is a legacy solution that provides isolation but is slow, expensive, and impractical for managing a large data center infrastructure with modern requirements.

Cin-band Ethernet

In-band Ethernet management uses the same network interfaces and pathways as the production data, making it vulnerable to DoS attacks on the production network and allowing access to the production network if the management plane is compromised.

Din-band dial-up circuit

An in-band dial-up circuit suffers from the same isolation issues as in-band Ethernet and the scalability and performance issues of dial-up, making it unsuitable for modern data center management.

Concept tested: Out-of-band management benefits

Source: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/DC_Infra2_5/DCInfra_1.html

Topics

#Out-of-band Management#Management Plane Security#Data Center Design#DoS Mitigation

Community Discussion

No community discussion yet for this question.

Full 300-420 Practice