nerdexam
CompTIA

CAS-002 · Question #236

A large enterprise introduced a next generation firewall appliance into the Internet facing DMZ. All Internet traffic passes through this appliance. Four hours after implementation the network…

The correct answer is B. When testing the appliance. Unacceptable latency introduced by a newly deployed firewall appliance should have been identified during the testing phase before production deployment.

Technical Integration of Enterprise Components

Question

A large enterprise introduced a next generation firewall appliance into the Internet facing DMZ. All Internet traffic passes through this appliance. Four hours after implementation the network engineering team discovered that traffic through the DMZ now has un-acceptable latency, and is recommending that the new firewall be taken offline. At what point in the implementation process should this problem have been discovered?

Options

  • ADuring the product selection phase
  • BWhen testing the appliance
  • CWhen writing the RFP for the purchase process
  • DDuring the network traffic analysis phase

How the community answered

(67 responses)
  • A
    13% (9)
  • B
    79% (53)
  • C
    4% (3)
  • D
    3% (2)

Why each option

Unacceptable latency introduced by a newly deployed firewall appliance should have been identified during the testing phase before production deployment.

ADuring the product selection phase

Product selection evaluates feature capabilities and vendor claims at a high level and does not involve live traffic performance validation under actual production conditions.

BWhen testing the applianceCorrect

Performance testing and proof-of-concept validation during the testing phase allow engineers to measure throughput, latency, and packet processing capacity under realistic traffic loads before the appliance is placed in the live environment - this is precisely the stage where a capacity or performance mismatch would be discovered and resolved without service impact.

CWhen writing the RFP for the purchase process

Writing the RFP captures requirements and specifications before procurement and cannot reveal how the specific appliance will perform under real traffic conditions.

DDuring the network traffic analysis phase

Network traffic analysis informs sizing requirements and design decisions but does not validate whether a specific appliance can process that traffic within acceptable latency bounds.

Concept tested: Appliance performance testing before production deployment

Source: https://csrc.nist.gov/publications/detail/sp/800-115/final

Topics

#firewall implementation#performance testing#DMZ#network engineering

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice