CAS-002 · Question #891
An IT manager is working with a project manager from another subsidiary of the same multinational organization. The project manager is responsible for a new software development effort that is being…
The correct answer is B. Time-based access control lists. Time-based ACLs enforce access restrictions based on a fixed time window, and when team members span multiple time zones, the overseas developers may be locked out during their working hours, causing availability failures.
Question
An IT manager is working with a project manager from another subsidiary of the same multinational organization. The project manager is responsible for a new software development effort that is being outsourced overseas, while customer acceptance testing will be performed in house. Which of the following capabilities is MOST likely to cause issues with network availability?
Options
- ASource code vulnerability scanning
- BTime-based access control lists
- CISP to ISP network jitter
- DFile-size validation
- EEnd to end network encryption
How the community answered
(34 responses)- A3% (1)
- B59% (20)
- C9% (3)
- D24% (8)
- E6% (2)
Why each option
Time-based ACLs enforce access restrictions based on a fixed time window, and when team members span multiple time zones, the overseas developers may be locked out during their working hours, causing availability failures.
Source code vulnerability scanning consumes compute and potentially some network bandwidth but does not gate or block network access for project participants.
Time-based ACLs are configured to allow or deny traffic only within specific time ranges relative to the enforcing device's clock, typically reflecting one organization's local business hours. Because the outsourced development team is overseas and the acceptance testing team is in-house, the two groups operate in significantly different time zones, making it likely that overseas developers require network access precisely when the time-based ACL has closed the allowed window. This scheduling mismatch is the most direct cause of network availability issues in a multinational, multi-timezone project.
ISP-to-ISP jitter introduces variable latency and packet delay, degrading connection quality, but does not impose a hard block on network availability.
File-size validation is an application-layer input control that rejects oversized uploads and has no bearing on underlying network availability.
End-to-end encryption adds CPU overhead for handshake and cipher operations but does not restrict or interrupt network availability for authorized users.
Concept tested: Time-based ACL restrictions causing cross-timezone access issues
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-16/sec-data-acl-xe-16-book/sec-time-based-acl.html
Topics
Community Discussion
No community discussion yet for this question.