400-007 · Question #372
Network designers often segment networks by creating modules for various reasons. Sometimes however a network can be unintentionally segmented. For instance, if the only way to connect a remote site…
The correct answer is A. Build virtual networks that pass over the network. When two sites are only reachable via the public Internet and the corporate network is unintentionally segmented, building a virtual overlay network (VPN) over the Internet restores logical private connectivity between them.
Question
Network designers often segment networks by creating modules for various reasons. Sometimes however a network can be unintentionally segmented. For instance, if the only way to connect a remote site to a headquarters or regional site is to connect them both to the public Internet the corporate network is now unintentionally segmented. Which of the following option can be used to desegment the network in this situation?
Options
- ABuild virtual networks that pass over the network
- BMark traffic for special handling through quality of service
- CConfigure little to no control data plane policy
- DBlock specific sources from reaching specific destinations
How the community answered
(32 responses)- A88% (28)
- B6% (2)
- C3% (1)
- D3% (1)
Why each option
When two sites are only reachable via the public Internet and the corporate network is unintentionally segmented, building a virtual overlay network (VPN) over the Internet restores logical private connectivity between them.
Virtual overlay networks such as IPsec VPN, GRE tunnels, or DMVPN encapsulate private corporate traffic inside public Internet packets, creating a logically private path between the remote site and headquarters without requiring dedicated private circuits, effectively desegmenting the corporate network.
Quality of Service marks and prioritizes existing traffic flows but does not create connectivity between networks that cannot already reach each other.
Removing control and data plane policy eliminates security and traffic management without establishing any path between the segmented network segments.
Blocking specific sources from reaching specific destinations further restricts reachability rather than restoring connectivity between the segmented sites.
Concept tested: VPN overlay networks for corporate network desegmentation
Source: https://www.cisco.com/c/en/us/tech/wan/virtual-private-networks-vpn/index.html
Topics
Community Discussion
No community discussion yet for this question.