350-801 · Question #495
Where does an administrator establish the trust boundary on a LAN?
The correct answer is A. access switch. The QoS trust boundary is established at the access layer switch - the switch to which end devices (phones, PCs) directly connect. At this point, the network decides whether to trust the DSCP or CoS markings set by the endpoint. IP phones are typically trusted at the access…
Question
Where does an administrator establish the trust boundary on a LAN?
Options
- Aaccess switch
- Bdistribution switch
- Cvoice VLAN
- Dcore router
How the community answered
(31 responses)- A90% (28)
- C3% (1)
- D6% (2)
Explanation
The QoS trust boundary is established at the access layer switch - the switch to which end devices (phones, PCs) directly connect. At this point, the network decides whether to trust the DSCP or CoS markings set by the endpoint. IP phones are typically trusted at the access switch port, while PC traffic is either re-marked or untrusted. Placing the trust boundary at the access switch prevents untrusted devices from influencing QoS policy deeper in the network. Placing it at the distribution or core switch is less secure because it would trust markings from all upstream devices, including potentially misconfigured or malicious endpoints.
Topics
Community Discussion
No community discussion yet for this question.