Examkin

Question

Difficulty: HardDocumentation and Diagrams

During an infrastructure security audit of a enterprise cloud network, a network engineer discovers that virtual machines residing in separate IP subnets can communicate directly without traversing the perimeter firewall. To trace the virtual routing tables, interface IP addressing, VLAN IDs, and logical security zone boundaries across the environment regardless of underlying hardware server placement, which of the following documentation artifacts should the engineer consult first?

  1. Logical network diagramAnswer
  2. B
    Physical network diagram
  3. C
    Rack elevation diagram
  4. D
    Wiring schematic

Answer

Logical network diagram
Logical network diagrams document how data moves through a network by displaying subnets, IP addressing schemes, VLAN IDs, virtual routing instances, and security zones. This makes them the primary reference for troubleshooting logical routing anomalies across physical or virtual boundaries.

Step-by-Step Solution

1
Identify the primary requirement of the scenario
The engineer needs to trace IP subnets, VLAN IDs, virtual routing tables, and security boundaries across virtualized infrastructure.
Resolving unauthorized cross-subnet communication requires analyzing Layer 2 and Layer 3 logical structures.
2
Evaluate documentation types against the requirement
Physical network diagrams, rack elevations, and wiring schematics document Layer 1 physical attributes (hardware placement, cabling, rack U-height).
Only logical network diagrams map IP addressing, subnets, virtual interfaces, and security zones.
3
Select the correct documentation artifact
The logical network diagram is the appropriate artifact.
It provides the high-level and detailed logical topology required to pinpoint misconfigured virtual routing paths.

Key Concept

Logical Network Topology Documentation
Rate this question

Topics

Documentation and Diagrams

More questions from this topic