300-420 Question 272
Select 3An enterprise network is being designed with segmented management networks. The design requires the management plane to remain isolated from the data plane and ensure secure access to management interfaces. Which combination of features should be implemented to meet these requirements?
- A
Use VRFs (Virtual Routing and Forwarding) to isolate management traffic
- B
Enable SNMPv2 for management traffic encryption
- C
Configure out-of-band (OOB) management links
- D
Implement AAA (Authentication, Authorization, and Accounting) for management access
- E
Deploy a single VLAN for both management and data traffic to simplify configuration
Show answer and explanation
Correct answers: A, C, D
Explanation
To ensure segmented management networks, a combination of logical isolation (e.g., VRFs), physical separation (e.g., OOB links), and secure access controls (e.g., AAA) is required. These approaches collectively ensure that the management plane is isolated from the data plane while maintaining secure and reliable access to management interfaces. Incorrect options, such as using SNMPv2 or combining management and data traffic into one VLAN, fail to meet the design requirements for segmentation and security.
- A. Correct.
Using VRFs helps to logically isolate management traffic from the data plane, ensuring segmentation and security.
- B. Incorrect.
SNMPv2 does not provide encryption for management traffic. SNMPv3 should be used for secure management traffic, but it is not mentioned in the scenario.
- C. Correct.
Configuring out-of-band management links ensures that management traffic is physically separated from data traffic, increasing security and reliability.
- D. Correct.
Implementing AAA provides secure access control to management interfaces, ensuring that only authorized users can access the management plane.
- E. Incorrect.
Deploying a single VLAN for management and data traffic violates the requirement for segregation and secure access, making it an unsuitable choice.