Recommend the Appropriate Network Separation Deployments ECS-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A large enterprise is deploying ECS to serve multiple business units. One business unit handles highly confidential data and requires the strongest possible isolation. Another business unit has less sensitive data and is cost-conscious. The enterprise has a limited number of physical ECS nodes and wants to use them efficiently. The security team has mandated that the confidential data must not share any network infrastructure with other business units. How should the network separation be designed?

   • ADeploy a separate physical ECS cluster and network for each business unit.
   • BPlace all business units on the same physical network but use different storage pools and encryption keys for the confidential data.
   • CDedicate a physical ECS node and a physical network switch to the confidential business unit, and use VLANs for the other business units on the remaining nodes.
   • DUse VLANs for all business units, including the confidential one, and rely on strict firewall rules to enforce isolation.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which network separation deployment type relies on distinct physical switches or routers to isolate ECS management and data traffic?

   • ASubnet-based separation
   • BPhysical separation
   • CVLAN-based separation
   • DLogical separation
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is deploying ECS for a high-performance computing (HPC) workload that requires extremely low latency and high throughput between the application servers and the ECS nodes. The workload is the only application on the network, and there are no other tenants. The company has a limited budget but wants to ensure the best possible performance. What is the most appropriate network separation deployment?

   • AUse a dedicated physical network for the HPC workload, separate from the general corporate network.
   • BUse a VLAN on the existing corporate network to isolate the HPC traffic.
   • CPlace the HPC workload on the general corporate network without any separation, as it is the only application.
   • DUse a VPN tunnel over the internet to connect the HPC application servers to the ECS nodes.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A managed service provider (MSP) is designing an ECS solution to host storage for multiple external clients. Each client requires strong isolation from other clients' data and management traffic. The MSP's data center has limited physical space and wants to maximize the use of its existing high-capacity ECS nodes. The clients have varying performance requirements, but none require dedicated hardware. What is the most appropriate network separation strategy?

   • AUse a single shared VLAN for all clients and rely on the ECS object storage's built-in encryption to separate their data.
   • BAssign a dedicated physical ECS node to each client to ensure complete isolation.
   • CCreate a unique VLAN per client and configure the ECS nodes to route each client's traffic through its designated VLAN.
   • DPlace all clients on the same network segment but use different access keys to control their access.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A financial services firm is deploying an ECS cluster to serve two distinct internal departments: one handling public-facing web content and another processing confidential transaction data. The security team mandates that the two departments' traffic must not share any broadcast domain, but both must connect to the same pair of ECS nodes to minimize hardware cost. The network team has already allocated separate VLANs for each department. What is the most appropriate network separation deployment to recommend?

   • AUse the same VLAN for both departments but apply different subnet masks to their respective IP ranges.
   • BConfigure both departments on the same physical switch ports but assign different VLANs to each department's traffic.
   • CDeploy two completely separate ECS clusters, one for each department, with dedicated physical switches and cabling.
   • DPlace both departments on a single flat network and rely on the ECS object-level access control lists to isolate their data.
   Reveal Solution Discussion Select an answer first