Network architect is recommending that a customer move from a three-tier campus LAN topology
to a two-tier topology that routes traffic distribution layer provides firewall services and STP root
guard. As a best practice, where should firewall services and STP root guard be important
topology?
A.
These security features should be implemented at both the network access layer and the core.
B.
These security features should be implemented at the core.
C.
These security features should be implemented at the network access layer.
D.
Firewall services features should be implemented at the core, and STP root guard be
implemented at the access layer
Explanation:
B is correct
0
0
The best practices here is a 2-tier routed access.
So security should be Vlan boundary, so access layer.
D make sense
0
0
D makes sense
0
0
I found something else:
Page 6:
http://www8.hp.com/h20195/v2/GetPDF.aspx/4AA5-5626ENW.pdf
0
0
The study guide says B
Quote:
In a two-tier topology, the core might need to take over some of these functions such as firewall services and STP root guard. The access layer might take over other functions such as port isolation and broadcast throttling.
0
0
hi
what is the right answer ?
0
0
D is the Correct answer (ref Study guide)
In a two-tier topology, the core might need to take over some of these functions
such as firewall services. The access layer might take over other functions such as
STP root guard, port isolation, and broadcast throttling.
0
0