A company is designing a new data center network. The security team insists on using out-of-band management for all network devices. What is the primary security benefit?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — out-of-band management puts management interfaces on a separate network, so attackers who've already breached the production network can't automatically reach them. That's the primary security benefit.
Full Explanation
The correct benefit is that out-of-band management places device management interfaces on a physically separate network, so compromise of the production network does not automatically grant access to device management. The dedicated high-bandwidth firmware-update claim is wrong because bandwidth is not the primary driver for out-of-band management. The claim that it eliminates the need for encrypted management protocols such as SSH is wrong because encrypted protocols are still required even on out-of-band networks. The claim that it allows management traffic to bypass IDS sensors for lower latency is wrong because bypassing IDS is a security weakness, not a benefit.