Understanding network physical and logical topologies is critical for network defense. In this simulation, you will analyze a highly redundant network architecture and identify the core characteristics that define its structural resilience.

CND (312-38) Network Defense Simulation

Network Scenario

You are auditing the architecture of a critical infrastructure control center. To ensure maximum availability and fault tolerance, the designers have implemented a topology where every node has a direct point-to-point physical link to every other node in the network. This eliminates single points of failure but significantly increases cable management complexity and deployment costs.

Traffic & Logs

Monitoring tools indicate that traffic can take multiple paths to reach a destination. Routing protocols are actively managing these paths to optimize for link health.

[ROUTING UPDATE] Link Failure Detected: NODE_A <-> NODE_C Timestamp: 2023-11-15 14:02:10 Action: Traffic rerouted via NODE_B and NODE_D Status: 0% Packet Loss maintained. [NEIGHBOR TABLE] Node ID | Adjacent Neighbors ---------|------------------- Node_1 | Node_2, Node_3, Node_4, Node_5 Node_2 | Node_1, Node_3, Node_4, Node_5 Node_3 | Node_1, Node_2, Node_4, Node_5 Node_4 | Node_1, Node_2, Node_3, Node_5 Node_5 | Node_1, Node_2, Node_3, Node_4

Defense Insight: Redundancy allows for continuous operations during localized hardware failure or localized DoS attacks.

Question

What is the best way to describe a mesh network topology?

Think about "Full Mesh." In this setup, the number of connections is calculated by n(n-1)/2. The primary characteristic is the direct interconnectedness of every single node, providing unparalleled path redundancy.

Expert Analysis

1. What is happening in the network

The network utilizes a Full Mesh topology. This is evidenced by the neighbor table showing that every node is directly adjacent to every other node in the cluster. When a link fails between Node A and Node C, the network remains functional because alternate paths exist.

2. Identify attack or behavior

From a defensive perspective, this topology is highly resistant to "Physical Layer" denial of service (cutting a cable) or individual node failures. However, it presents a larger attack surface because any compromised node has direct physical/link-layer access to all other nodes.

3. Why correct answer is correct

Option A is the defining characteristic of a full mesh network. By definition, a mesh topology ensures that every node has a point-to-point connection to every other node, creating a web of connections that allows for maximum fault tolerance.

4. Why others are wrong

Option B: This describes a "Hybrid" topology, but not specifically the core definition of Mesh.
Option C: This describes a "Star" topology, where all nodes connect to a central hub or switch.
Option D: This is incorrect because mesh networks are historically not cost-efficient due to the massive amount of cabling and NIC ports required.

5. Defensive Action

In a mesh topology, security must focus on Link-Layer Security and Micro-segmentation. Because every node is directly connected, a single compromised host could potentially sniff traffic for all other nodes if switching/encryption isn't properly managed. Defenders should implement IEEE 802.1AE (MACsec) to encrypt traffic between these directly connected peers.

MINI LESSON: Topology Resilience

Full Mesh vs. Partial Mesh:

Full Mesh: Every node connects to every other node. Formula for links: $L = \frac{n(n-1)}{2}$.
Partial Mesh: Some nodes connect to all others, but some only connect to the nodes they exchange the most data with. More cost-effective.

Defensive Mindset: Topologies dictate traffic flow. Redundancy is a defense against availability threats, but it requires rigorous access control to prevent lateral movement.

Advance your knowledge of network infrastructure and defense strategies for the CND exam.

Explore more CND simulations