nerdexam
CompTIA

CAS-002 · Question #891

An IT manager is working with a project manager from another subsidiary of the same multinational organization. The project manager is responsible for a new software development effort that is being…

The correct answer is B. Time-based access control lists. Time-based ACLs enforce access restrictions based on a fixed time window, and when team members span multiple time zones, the overseas developers may be locked out during their working hours, causing availability failures.

Integration of Computing, Communications and Business Disciplines

Question

An IT manager is working with a project manager from another subsidiary of the same multinational organization. The project manager is responsible for a new software development effort that is being outsourced overseas, while customer acceptance testing will be performed in house. Which of the following capabilities is MOST likely to cause issues with network availability?

Options

  • ASource code vulnerability scanning
  • BTime-based access control lists
  • CISP to ISP network jitter
  • DFile-size validation
  • EEnd to end network encryption

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    59% (20)
  • C
    9% (3)
  • D
    24% (8)
  • E
    6% (2)

Why each option

Time-based ACLs enforce access restrictions based on a fixed time window, and when team members span multiple time zones, the overseas developers may be locked out during their working hours, causing availability failures.

ASource code vulnerability scanning

Source code vulnerability scanning consumes compute and potentially some network bandwidth but does not gate or block network access for project participants.

BTime-based access control listsCorrect

Time-based ACLs are configured to allow or deny traffic only within specific time ranges relative to the enforcing device's clock, typically reflecting one organization's local business hours. Because the outsourced development team is overseas and the acceptance testing team is in-house, the two groups operate in significantly different time zones, making it likely that overseas developers require network access precisely when the time-based ACL has closed the allowed window. This scheduling mismatch is the most direct cause of network availability issues in a multinational, multi-timezone project.

CISP to ISP network jitter

ISP-to-ISP jitter introduces variable latency and packet delay, degrading connection quality, but does not impose a hard block on network availability.

DFile-size validation

File-size validation is an application-layer input control that rejects oversized uploads and has no bearing on underlying network availability.

EEnd to end network encryption

End-to-end encryption adds CPU overhead for handshake and cipher operations but does not restrict or interrupt network availability for authorized users.

Concept tested: Time-based ACL restrictions causing cross-timezone access issues

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/xe-16/sec-data-acl-xe-16-book/sec-time-based-acl.html

Topics

#time-based ACLs#network availability#outsourcing#time zone access control

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice