Question 650
The design record describes this issue: During a predeployment review for a university core network, the team discovers this design gap: employee laptops set all application packets to the highest DSCP value, overwhelming priority queues. An approval gate requires both a measurable acceptance check and a durable prevention control. Which technical principle BEST explains the design decision?
Explanation
Correct Answer
An untrusted endpoint can mark arbitrary DSCP values unless network policy validates and normalizes them. The correct engineering response is: Classify and remark traffic at a trusted access or distribution boundary rather than trusting all endpoint tags. The observable check is: Traffic captures show unauthorized high-priority markings rewritten before reaching congestion points. The university core network acceptance record also captures this result.
Incorrect Answers
An untrusted endpoint can mark arbitrary DSCP values unless network policy validates and normalizes them. The offered choice instead concerns a different principle: Traffic shaping buffers and schedules excess packets to smooth bursts instead of immediately discarding all excess. Those technical conditions are not interchangeable.
An untrusted endpoint can mark arbitrary DSCP values unless network policy validates and normalizes them. The offered choice instead concerns a different principle: End-to-end QoS behavior depends on consistent class mapping across each administrative transport domain. Those technical conditions are not interchangeable.
An untrusted endpoint can mark arbitrary DSCP values unless network policy validates and normalizes them. The offered choice instead concerns a different principle: Policing measures traffic against a rate profile and can drop or remark excess traffic rather than delaying it in a shaping queue. Those technical conditions are not interchangeable.