nerdexam
Cisco

352-001 · Question #51

You are tasked with implementing a 1000-phone remote access solution, where phones will traverse a WAN edge router. Assuming all of the following features are supported in a hardware- assisted manner,

The correct answer is A. encryption. Even with hardware acceleration, encryption imposes the greatest per-packet delay due to the computational complexity of cryptographic algorithms.

Design Considerations

Question

You are tasked with implementing a 1000-phone remote access solution, where phones will traverse a WAN edge router. Assuming all of the following features are supported in a hardware- assisted manner, which of the following will have the most detrimental impact on the delay of the packet?

Options

  • Aencryption
  • Bstateful firewall
  • CMPLS encapsulation
  • DGRE encapsulation

How the community answered

(40 responses)
  • A
    83% (33)
  • B
    3% (1)
  • C
    10% (4)
  • D
    5% (2)

Why each option

Even with hardware acceleration, encryption imposes the greatest per-packet delay due to the computational complexity of cryptographic algorithms.

AencryptionCorrect

Encryption algorithms such as AES involve multiple iterative rounds of substitution, permutation, and XOR operations that require significantly more processing cycles than simple encapsulation or stateful lookup operations, even when offloaded to dedicated crypto hardware. The inherent computational depth of block cipher processing means encryption consistently adds more latency than the other listed functions when applied to delay-sensitive VoIP packets traversing a WAN edge router.

Bstateful firewall

Stateful firewall inspection involves connection table lookups that are very fast with hardware assist and add far less delay than cryptographic processing.

CMPLS encapsulation

MPLS encapsulation is a straightforward label-pushing operation with negligible processing overhead.

DGRE encapsulation

GRE encapsulation simply prepends a fixed-size header to the packet, requiring minimal processing and adding only marginal delay.

Concept tested: Impact of encryption on VoIP packet delay

Source: https://www.cisco.com/c/en/us/support/docs/voice/voice-quality/14106-qos-voip.html

Topics

#encryption delay#packet latency#VoIP over WAN#hardware acceleration

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice