Effective CISSP Questions

Software-defined networking (SDN) disassociates the forwarding process of network packets (data plane) from the routing process (control plane). It enables dynamic, programmatically efficient network configuration and improves network performance and monitoring. Which of the following statements about SDN is correct? (Wentz QOTD)
A. SDN is open standards-based and solely associated with the OpenFlow protocol
B. SDN employs a centralized architecture only
C. Switches and routers are located at the data plane
D. Network Function Virtualization (NFV) is part of SDN and belongs to the control plane

Kindly be reminded that the suggested answer is for your reference only. It doesn’t matter whether you have the right or wrong answer. What really matters is your reasoning process and justifications.

My suggested answer is C. Switches and routers are located at the data plane.

Wentz’s book, The Effective CISSP: Security and Risk Management, helps CISSP and CISM aspirants build a solid conceptual security model. It is a tutorial for information security and a supplement to the official study guides for the CISSP and CISM exams and an informative reference for security professionals.

SDN Architecture
SDN Architecture

The following is a summary from Wikipedia:

SDN attempts to centralize network intelligence in one network component by disassociating the forwarding process of network packets (data plane) from the routing process (control plane). “The use of open-source software in split control/data plane architectures traces its roots to the Ethane project at Stanford’s computer sciences department. Ethane’s simple switch design led to the creation of OpenFlow. An API for OpenFlow was first created in 2008. That same year witnessed the creation of NOX—an operating system for networks.”

  • Switches and routers are forwarding devices. “SDN provides the agility of controlling the generic forwarding devices such as routers and switches by using SDN controllers.”
  • SDN is open standards-based and commonly associated with the OpenFlow protocol. The Open Networking Foundation was founded in 2011 to promote SDN and OpenFlow. There are solutions extended by proprietary techniques such as Cisco Systems‘ Open Network Environment and Nicira‘s network virtualization platform.
  • “The implementation of the SDN control plane can follow a centralized, hierarchical, or decentralized design.”
  • “NFV Network Function Virtualization is a concept that complements SDN. Thus, NFV is not dependent on SDN or SDN concepts. NFV disunites software from hardware to enable flexible network deployment and dynamic operation. NFV deployments typically use commodity servers to run network services software versions that previously were hardware-based.”


軟件定義網絡 (SDN) 將網絡數據包的轉發過程(數據平面)與路由過程(控制平面)分離。 它支持動態的、以編程方式高效的網絡配置,並提高網絡性能和監控。 下列關於SDN的說法正確的是? (Wentz QOTD)
A. SDN 是基於開放標準的,僅與 OpenFlow 協議相關聯
B. SDN 僅採用集中式架構
C. 交換機和路由器位於數據平面
D. 網絡功能虛擬化(NFV)是SDN的一部分,屬於控制平面

Leave a Reply