A Network Engineer Is Attempting to Design-In Resiliency Characteristics for an Enterprise

question 47

Multiple Choice

A network engineer is attempting to design-in resiliency characteristics for an enterprise network's VPN services. If the engineer wants to help ensure some resilience against zero-day vulnerabilities exploited against the VPN implementation, which of the following decisions would BEST support this objective?

• A) Implement a reverse proxy for VPN traffic that is defended and monitored by the organization's SOC with near-real-time alerting to administrators.
• B) Subscribe to a managed service provider capable of supporting the mitigation of advanced DDoS attacks on the enterprise's pool of VPN concentrators.
• C) Distribute the VPN concentrators across multiple systems at different physical sites to ensure some backup services are available in the event of primary site loss.
• D) Employ a second VPN layer concurrently where the other layer's cryptographic implementation is sourced from a different vendor.

---

Definitions:

Interstate Commerce Act

A United States federal law designed to regulate the railroad industry, particularly its monopolistic practices, by requiring reasonable and just rates with the establishment of the Interstate Commerce Commission.

Passed

To have been approved or made official, particularly in the context of legislation or examinations.

Horizontal Price-Fixing Conspiracy

A horizontal price-fixing conspiracy is an agreement between competitors at the same level of the supply chain to set prices, limit production, or otherwise manipulate the market.

Sherman Act

The Sherman Act is a landmark federal statute passed in 1890 that outlaws monopolistic business practices and promotes competition in the United States.