300-420 Question 273
Select 3A large enterprise is designing its network to ensure secure and isolated management access to network devices. The network team decides to implement segmented management networks. Which of the following design considerations should be prioritized when implementing segmented management networks?
- A
Use a dedicated VLAN or VRF for management traffic.
- B
Enable routing between the management network and production network for simplified troubleshooting.
- C
Implement secure access methods like SSH and HTTPS for device management.
- D
Allow all traffic types, including user traffic, on the management network to maximize bandwidth utilization.
- E
Deploy role-based access control (RBAC) to restrict access to management resources.
Show answer and explanation
Correct answers: A, C, E
Explanation
Segmented management networks are designed to isolate management traffic from production traffic to improve security and performance. Dedicated VLANs or VRFs ensure traffic segregation, while secure access methods like SSH and HTTPS protect the confidentiality of management data. Additionally, implementing RBAC ensures that only authorized users can access critical management resources. Avoiding cross-routing and preventing user traffic on management networks are essential steps to maintain network segmentation and security.
- A. Correct.
Using a dedicated VLAN or VRF for management traffic ensures isolation and prevents unauthorized access to management resources. This is critical for a segmented management network.
- B. Incorrect.
Routing between the management network and production network compromises the isolation of the management network, making it less secure.
- C. Correct.
Secure access methods like SSH and HTTPS encrypt management traffic, ensuring data confidentiality and integrity during device management.
- D. Incorrect.
Allowing all traffic types, including user traffic, on the management network violates the principle of segmentation and exposes sensitive management traffic to potential threats.
- E. Correct.
Role-based access control (RBAC) restricts access to management resources, ensuring that only authorized personnel can manage network devices.