Network Infrastructure Concepts

Question 1 of 6

An organization needs to connect Customer A's servers and Customer B's servers in the same data center. Security requires that no network-based technique can ever allow Customer A's systems to reach Customer B's systems. Which approach BEST meets this requirement?

A. Configure each customer on a dedicated VLAN with ACLs blocking inter-customer traffic B. Connect each customer to separate physical switches with no cable between them C. Deploy an SDN controller to enforce isolation between customer virtual networks D. Configure a firewall between customer segments with a default-deny policy

Question 2 of 6

An attacker's workstation is connected to a switch access port in VLAN 10. The attacker sends 802.1Q trunk negotiation frames and succeeds in receiving frames from VLANs 10, 20, and 30. Which attack technique is this?

A. ARP spoofing B. VLAN hopping via switch spoofing C. MAC flooding D. Double-tagging

Question 3 of 6

A device on VLAN 10 (192.168.10.0/24) needs to communicate with a server on VLAN 20 (192.168.20.0/24). What is required for this communication to occur?

A. A trunk port on the source device's switch port B. The two VLANs must be merged into one broadcast domain C. A Layer 3 device (router or Layer 3 switch) to route traffic between the VLANs D. A bridge connecting the two VLAN interfaces on the physical switch

Question 4 of 6

Which SDN plane is responsible for building and maintaining the IP routing table and MAC address table?

A. Data plane B. Control plane C. Management plane D. Forwarding plane

Question 5 of 6

An attacker gains access to the SDN controller management console from a compromised workstation on the production VLAN and removes ACL rules protecting the database VLAN. Which plane was compromised?

A. Data plane — the attacker manipulated packet forwarding tables B. Control plane — the attacker modified the routing protocol configuration C. Management plane — the attacker accessed the device's configuration interface D. Application plane — the attacker exploited a software vulnerability

Question 6 of 6

A network administrator SSHes into a switch and adds a new static route. Which sequence correctly describes how this change propagates through the SDN planes?

A. Data plane stores the route → control plane distributes it → management plane displays it B. Management plane accepts the command → control plane adds route to routing table → data plane forwards traffic using the new route C. Control plane receives the route → management plane validates it → data plane stores it D. Management plane accepts the command → data plane immediately begins forwarding → control plane updates tables afterward

Matching

Match each scenario to the SDN plane or segmentation concept it best represents.

1. A virtual firewall performing NAT and VLAN tagging on packets as they pass through

2. No cable exists between the ICS network and the corporate IT network — no software misconfiguration can create a path

3. A network engineer accesses the web GUI to write an ACL and deploy it to 400 virtual switches simultaneously

4. The switch runs OSPF, receives route advertisements from neighbors, and updates its forwarding table automatically

1. 2. 3. 4.

A. Control Plane

B. Air Gap

C. Data Plane

D. Management Plane

Network Infrastructure Concepts Quiz

Matching