nerdexam
Cisco

400-007 · Question #372

Network designers often segment networks by creating modules for various reasons. Sometimes however a network can be unintentionally segmented. For instance, if the only way to connect a remote site…

The correct answer is A. Build virtual networks that pass over the network. When two sites are only reachable via the public Internet and the corporate network is unintentionally segmented, building a virtual overlay network (VPN) over the Internet restores logical private connectivity between them.

Designing Network Infrastructure

Question

Network designers often segment networks by creating modules for various reasons. Sometimes however a network can be unintentionally segmented. For instance, if the only way to connect a remote site to a headquarters or regional site is to connect them both to the public Internet the corporate network is now unintentionally segmented. Which of the following option can be used to desegment the network in this situation?

Options

  • ABuild virtual networks that pass over the network
  • BMark traffic for special handling through quality of service
  • CConfigure little to no control data plane policy
  • DBlock specific sources from reaching specific destinations

How the community answered

(32 responses)
  • A
    88% (28)
  • B
    6% (2)
  • C
    3% (1)
  • D
    3% (1)

Why each option

When two sites are only reachable via the public Internet and the corporate network is unintentionally segmented, building a virtual overlay network (VPN) over the Internet restores logical private connectivity between them.

ABuild virtual networks that pass over the networkCorrect

Virtual overlay networks such as IPsec VPN, GRE tunnels, or DMVPN encapsulate private corporate traffic inside public Internet packets, creating a logically private path between the remote site and headquarters without requiring dedicated private circuits, effectively desegmenting the corporate network.

BMark traffic for special handling through quality of service

Quality of Service marks and prioritizes existing traffic flows but does not create connectivity between networks that cannot already reach each other.

CConfigure little to no control data plane policy

Removing control and data plane policy eliminates security and traffic management without establishing any path between the segmented network segments.

DBlock specific sources from reaching specific destinations

Blocking specific sources from reaching specific destinations further restricts reachability rather than restoring connectivity between the segmented sites.

Concept tested: VPN overlay networks for corporate network desegmentation

Source: https://www.cisco.com/c/en/us/tech/wan/virtual-private-networks-vpn/index.html

Topics

#network segmentation#VPN tunneling#WAN design#overlay networks

Community Discussion

No community discussion yet for this question.

Full 400-007 Practice