問題文
A provider protects a link with MACsec in static CAK mode. During a maintenance window the key agreement session on that link goes inactive, and the firewall then drops every frame in both directions although the link itself stays up. For this link the provider values availability over confidentiality. Which change matches that priority?
選択肢
- Configure the connectivity association so that the link still carries traffic while the key agreement session is inactive, which sends those frames as clear text with no MACsec header.
- Add a fallback preshared key to the connectivity association, because that key carries the link whenever the first key does not match and traffic keeps flowing during the window.
- Lower the interval at which the key agreement announcements leave the interface, because a shorter interval keeps the session alive through the window and no frame is ever dropped.
- Exclude the protocol that the affected application uses from MACsec, because the excluded frames then travel around the secured link while the session is down.