For an Executive Summary, typically the following items should be included: Brief Summary Contact Information High-Level Design Purpose of the Document Recommendations Scope Target Audience

CISO: responsible for establishing security policy and selecting security controls for the infrastructure. Network Design/Architecture: responsible for authoring the low-level design, and creating the configuration to meet the technical requirements. Network Operations: responsible for supporting, troubleshooting, and monitoring the wired/wireless infrastructure. Security Operations: responsible for investigating IDS/IPS incidents and managing firewalls.

Capacity based design with low to mid density - Basic office/cubicle area with low to medium user density and no voice with limited rf redundancy. Coverage based design - Coverage, office areas with higher user density OR basic coverage office/cubicle with High Demand users High-capacity design - High user density indoor space, with high demand users Very low-density, low coverage - Warehouses, large open areas The types of wireless network deployment should be matched to the usage scenarios based on the density of users and coverage requirements: Capacity based design with low to mid density is suitable for basic office or cubicle areas where there are not many users, and high-performance voice applications are not a priority, thus limited RF redundancy may be acceptable. Coverage based design is intended for areas where coverage is more critical than capacity. It could be used in office areas with higher user density, where maintaining a basic level of connectivity is more important than accommodating a large number of high-bandwidth connections. High-capacity design is used in environments where there is a high density of users who are likely to be using bandwidth-intensive applications. This could include indoor spaces like conference centers, auditoriums, or any area with a high concentration of users and devices. Very low-density, low coverage is typically for spaces like warehouses or large open areas where there are few users spread out over a large are a. The focus here is on providing coverage to all areas, regardless of the low user density.

For the solution proposal, the documents that should typically be included are: Architect's notes from meetings As-built rack drawings Assumptions documented in design Bill of materials Data sheets of equipment proposed Proposed topology diagram Quote

Capacity based design with low to mid density - 100,000 ft² / 900 m² building 100,000/10,000 = 10 APs Coverage based design - 100,000 ft² / 9000 m² building 100,000/2,500 = 40 APs High-capacity design - 100,000 ft² / 9000 m² building 100,000/1,500 = 67 APs Very low-density, low coverage - 100,000 ft² / 9000 m² building 100,000/500 = 20 APs The deployment of Access Points (APs) in a wireless network design depends on the required density and coverage needed: Capacity based design with low to mid density is often used in environments like office spaces where there is a moderate amount of users and devices. Fewer APs are required compared to high-density scenarios. Coverage based design typically requires more APs than a low-density capacity design because the goal is to provide a wireless signal to all areas, regardless of the number of users. High-capacity design is for environments like stadiums or conference centers where a high number of users are expected to be concentrated in a particular are a. Thus, a higher number of APs is needed to accommodate the user load. Very low-density, low coverage is suitable for areas that have few users over a large space, such as warehouses or outdoor areas. Fewer APs are required as the focus is on covering space rather than supporting a large number of devices.

For the stakeholders at ACME Retail, the primary concerns include the cost of the solution and

ensuring that the solution is future-proof. Given the company's budget concerns, it is crucial that the

chosen network infrastructure offers a good return on investment and aligns with their financial

constraints. At the same time, considering the company's growth plans and the rapid evolution of

technology, the solution must be scalable and adaptable to future needs. This involves selecting

networking equipment and technologies that can support emerging trends, such as increased

wireless device usage, cloud computing, and advanced security requirements, without necessitating

frequent, costly upgrades. Balancing these concerns will help ACME Retail achieve its operational

goals while positioning itself for sustainable growth and innovation.

Option B in the provided selections outlines a configuration that includes an Aruba ClearPass Policy

Manager as a Publisher for the main DC and as a Standby Publisher for the DR, with subscriber

servers allocated to the main hospital and health centers. This setup is likely to match the

requirement for a fully redundant NAC solution, with local handling of authentication for the main

hospital and health centers, and centralized authentication for the clinics. The inclusion of VMs

(Virtual Machines) as subscribers for health centers suggests scalability and flexibility for future

expansion. The provision of 35k access licenses aligns with the support for 35k devices across all

locations.

The Aruba AP-635 is a Wi-Fi 6 (802.11ax) access point, designed for high-density environments such

as auditoriums. It is capable of providing high throughput and efficient airtime fairness to a large

number of clients, which makes it suitable for an auditorium setting with 1,000 seats and a high take

rate. The AP-635's advanced capabilities, including OFDMA and MU-MIMO, allow it to handle

multiple simultaneous connections efficiently, ensuring robust wireless coverage and performance

during company functions, all while keeping the number of APs to a minimum to satisfy aesthetic

concerns.

For ACME Retail, which aims to host all applications at the HO Data Center and has multiple locations

spread across different geographical areas, the Aruba SD-Branch Architecture would be the most

suitable design to meet their requirements. This architecture provides a simplified, integrated branch

networking solution combining SD-WAN, LAN, and security features. It enables centralized

management and control, allowing ACME Retail to efficiently route traffic from branch locations to

the HO Data Center, ensuring secure and reliable access to applications. The SD-Branch solution can

accommodate the company's growth and adapt to changing network demands, making it an ideal

choice for a scalable and flexible network infrastructure that supports ACME Retail's business

objectives.

To control exposed printer, conference room, and VoIP phone connections with a stateful firewall,

utilizing Tunneled Node functionality would be effective. Tunneled Node allows for the encapsulation

of wired Ethernet traffic into a user-based tunnel, similar to how wireless traffic is handled. This

means that traffic from these devices can be sent through a centralized controller where stateful

firewall policies can be applied. This setup ensures that the specific ports used by these devices are

subjected to the same level of security scrutiny and policy enforcement as wireless traffic, aligning

with the client's requirements for a secure and controlled network environment.