
Refer to the exhibit. All servers are in the same VLAN/Subnet. DNS Server-1 and DNS Server-2 must communicate with each other, and all servers must communicate with default gateway multilayer switch.
Which type of private VLAN ports should be configured to prevent communication between DNS servers and the file server?
Correct Answer: C
to configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as isolated port and GigabitEthernet0/3 and GrgabitEthernet0/4 as community ports. This way, the default gateway can communicate with all servers, the isolated port can only communicate with the promiscuous port, and the community ports can communicate with each other and the promiscuous port. This prevents the file server from communicating with the DNS servers, as required by the question.
To understand the concept of private VLANs and port types, you can refer to the following sections of the source book:
* Section 1.1.2: Describe the concepts of network security
* Section 1.1.2.1: Describe the concepts of private VLANs
* Section 1.1.2.2: Describe the concepts of port types
* Section 1.1.2.3: Describe the concepts of PVLAN edge
* Section 1.1.2.4: Describe the concepts of protected ports
* Section 1.1.2.5: Describe the concepts of PVLAN configuration
References:
* Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0
* Private VLAN - GeeksforGeeks
* A quick summarized view to Private VLAN (PVLAN) - Cisco Learning Network