Recommend the Appropriate Network Separation Deployments ECS-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A hospital is deploying ECS to store electronic health records (EHR). The hospital must comply with data privacy regulations that require strict access controls and audit trails. The hospital's IT department wants to ensure that only authorized medical applications can access the EHR data, and that administrative access is tightly controlled. What is the most appropriate network separation deployment?

   • APlace all medical applications and administrative workstations on the same VLAN to simplify management.
   • BCreate a dedicated VLAN for the medical applications that need to access the EHR data, and a separate management VLAN for administrative access.
   • CUse a single physical network for all traffic and rely on the ECS system's built-in encryption to protect the data.
   • DDeploy a separate physical ECS cluster for the EHR data and another for administrative functions.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   An organization is deploying ECS and is considering using a converged network where storage, management, and application traffic share the same physical infrastructure but are separated using VLANs. The organization's main concern is security. What is the most important security consideration when using this approach?

   • AThe requirement to use a firewall between each VLAN to filter traffic.
   • BThe risk of VLAN hopping attacks, where an attacker on one VLAN can gain access to another VLAN.
   • CThe need to use a different subnet for each VLAN to ensure routing works correctly.
   • DThe need to encrypt all traffic on the converged network to protect it from eavesdropping.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A university is deploying an ECS solution to serve multiple research departments. Each department has its own storage administrator who needs to manage their department's data and configuration. The university wants to give each administrator full control over their department's ECS namespace without allowing them to affect other departments. What is the most appropriate network separation deployment?

   • APlace all departments on the same network and use different storage pools to separate their data.
   • BCreate a separate VLAN for each department and assign management access to the ECS nodes only through the corresponding VLAN.
   • CUse a single shared VLAN for all departments and rely on the ECS role-based access control (RBAC) to limit administrator permissions.
   • DDeploy a separate physical ECS cluster for each department to ensure complete administrative isolation.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An ECS deployment must isolate storage replication traffic from client access traffic to prevent performance interference. Which network separation requirement does this address?

   • ACompliance requirement
   • BSecurity isolation
   • CManagement requirement
   • DPerformance requirement
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In a multi-tenant ECS deployment, which network separation approach is commonly used to ensure that each tenant's traffic is isolated on the same physical infrastructure?

   • ASubnet-only separation
   • BPhysical separation per tenant
   • CNo separation
   • DVLAN-based separation per tenant
   Reveal Solution Discussion Select an answer first