Question 450
During a multi-team AI platform review at an applied research institute, engineers report the following issue: GPU server BMC consoles are exposed through an unrestricted application VLAN. The affected work supports training and inference experiments; jobs must produce reproducible, defensible technical results. Select TWO: the most appropriate action and the strongest verification of that action. (Select TWO.)
Explanation
Correct Answers
Correct corrective action. Separate out-of-band host and switch management from high-volume AI workload traffic and restrict access to authorized operators. This fits the specific reported issue: GPU server BMC consoles are exposed through an unrestricted application VLAN. The corresponding failure being reduced is: Combining privileged management services with general workload networks increases exposure and makes recovery harder during production-fabric failure.
Correct independent evidence. An authorized operator reaches BMC and fabric management over the intended isolated path while workload accounts cannot. This verifies the corrective approach for the affected training and inference experiments instead of treating an architecture diagram alone as success.
Incorrect Answers
Not the most direct the action-and-evidence pair for these facts. Compare supported InfiniBand and AI-optimized Ethernet fabrics against workload collectives, latency, operational skills and interoperability needs without treating them as identical. This choice concerns infiniband and ethernet high-speed fabric selection and may be valid in another design. But this case reports 'GPU server BMC consoles are exposed through an unrestricted application VLAN', which calls for reasoning about management network isolation and access. The targeted response is: Separate out-of-band host and switch management from high-volume AI workload traffic and restrict access to authorized operators.
Not the most direct the action-and-evidence pair for these facts. Size east-west bandwidth, latency and oversubscription for distributed GPU training based on communication patterns rather than only user-facing north-south traffic. This choice concerns east-west ai data center network requirements and may be valid in another design. But this case reports 'GPU server BMC consoles are exposed through an unrestricted application VLAN', which calls for reasoning about management network isolation and access. The targeted response is: Separate out-of-band host and switch management from high-volume AI workload traffic and restrict access to authorized operators.
Not the most direct the action-and-evidence pair for these facts. A congested multi-flow test checks RDMA throughput and loss or congestion telemetry against the required service target. This choice concerns roce congestion and loss-management considerations and may be valid in another design. But this case reports 'GPU server BMC consoles are exposed through an unrestricted application VLAN', which calls for reasoning about management network isolation and access. The targeted response is: Separate out-of-band host and switch management from high-volume AI workload traffic and restrict access to authorized operators.