CAS-002 · Question #236
A large enterprise introduced a next generation firewall appliance into the Internet facing DMZ. All Internet traffic passes through this appliance. Four hours after implementation the network…
The correct answer is B. When testing the appliance. Unacceptable latency introduced by a newly deployed firewall appliance should have been identified during the testing phase before production deployment.
Question
A large enterprise introduced a next generation firewall appliance into the Internet facing DMZ. All Internet traffic passes through this appliance. Four hours after implementation the network engineering team discovered that traffic through the DMZ now has un-acceptable latency, and is recommending that the new firewall be taken offline. At what point in the implementation process should this problem have been discovered?
Options
- ADuring the product selection phase
- BWhen testing the appliance
- CWhen writing the RFP for the purchase process
- DDuring the network traffic analysis phase
How the community answered
(67 responses)- A13% (9)
- B79% (53)
- C4% (3)
- D3% (2)
Why each option
Unacceptable latency introduced by a newly deployed firewall appliance should have been identified during the testing phase before production deployment.
Product selection evaluates feature capabilities and vendor claims at a high level and does not involve live traffic performance validation under actual production conditions.
Performance testing and proof-of-concept validation during the testing phase allow engineers to measure throughput, latency, and packet processing capacity under realistic traffic loads before the appliance is placed in the live environment - this is precisely the stage where a capacity or performance mismatch would be discovered and resolved without service impact.
Writing the RFP captures requirements and specifications before procurement and cannot reveal how the specific appliance will perform under real traffic conditions.
Network traffic analysis informs sizing requirements and design decisions but does not validate whether a specific appliance can process that traffic within acceptable latency bounds.
Concept tested: Appliance performance testing before production deployment
Source: https://csrc.nist.gov/publications/detail/sp/800-115/final
Topics
Community Discussion
No community discussion yet for this question.