Exam N10-008 topic 1 question 301 discussion

Emmett Dulaney "Use private VLANs: Also known as port isolation, creating a private VLAN is a method of restricting switch ports (now called private ports) so that they can communicate only with a particular uplink. The private VLAN usually has numerous private ports and only one uplink, which is usually connected to a router, or firewall." B & C require creating rules, and D is about controlling the rate of packets to prevent DoS attacks.

A. Private VLANs. Private VLANs can be used to restrict the communication between the servers in the same subnet. A primary VLAN can be created and the database servers can be mapped to this VLAN as an isolated VLAN. This will restrict the communication between the database servers. Additionally, a secondary VLAN can be created and the application servers can be mapped to this VLAN as a community VLAN. This will allow the communication between the application and database servers. Furthermore, if any clustering is used, this can be accommodated by mapping the cluster servers to a promiscuous port in the primary VLAN.

Private VLANs (PVLANs) are the best choice for restricting communication between database servers in the same subnet while allowing communication with application servers in a different subnet. PVLANs can isolate devices within the same subnet without needing complex rules, unlike ACLs and firewalls. Control Plane Policing doesn't apply to this scenario, as it's for controlling traffic to a router's control plane.