Question 80
Operations wants to avoid recurrence of this design flaw: During a predeployment review for a logistics division, the team discovers this design gap: an IS-IS link is connected to a neighboring organization and unauthorized routers could establish routing adjacencies. An approval gate requires both a measurable acceptance check and a durable prevention control. Which preventive design control MOST DIRECTLY addresses this specific risk?
Explanation
Correct Answer
Standardize key rotation and restrict routing adjacency interfaces. Apply the same control to the logistics division rollout checklist. This control targets the underlying design risk. Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The follow-up acceptance check remains: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail. The logistics division acceptance record also captures this result.
Incorrect Answers
IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone. The repeat risk here is different: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A directly relevant preventive control is: Standardize key rotation and restrict routing adjacency interfaces. Apply the same control to the logistics division rollout checklist.
The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The repeat risk here is different: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A directly relevant preventive control is: Standardize key rotation and restrict routing adjacency interfaces. Apply the same control to the logistics division rollout checklist.
IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction. The repeat risk here is different: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A directly relevant preventive control is: Standardize key rotation and restrict routing adjacency interfaces. Apply the same control to the logistics division rollout checklist.