展示を参照してください。すべてのサーバーは同じ VLAN/サブネット内にあります。 DNS サーバー 1 と DNS サーバー 2 は相互に通信する必要があり、すべてのサーバーはデフォルト ゲートウェイ マルチレイヤー スイッチと通信する必要があります。 DNS サーバーとファイル サーバー間の通信を防止するには、どのタイプのプライベート VLAN ポートを構成する必要がありますか?
正解:C
to configure GigabitEthernet0/1 as promiscuous port, GigabitEthernet0/2 as isolated port and GigabitEthernet0/3 and GrgabitEthernet0/4 as community ports. This way, the default gateway can communicate with all servers, the isolated port can only communicate with the promiscuous port, and the community ports can communicate with each other and the promiscuous port. This prevents the file server from communicating with the DNS servers, as required by the question. To understand the concept of private VLANs and port types, you can refer to the following sections of the source book: * Section 1.1.2: Describe the concepts of network security * Section 1.1.2.1: Describe the concepts of private VLANs * Section 1.1.2.2: Describe the concepts of port types * Section 1.1.2.3: Describe the concepts of PVLAN edge * Section 1.1.2.4: Describe the concepts of protected ports * Section 1.1.2.5: Describe the concepts of PVLAN configuration References: * Implementing and Operating Cisco Security Core Technologies (SCOR) v1.0 * Private VLAN - GeeksforGeeks * A quick summarized view to Private VLAN (PVLAN) - Cisco Learning Network