Question 200
During a GPU datacenter maintenance window, an engineer discovers: An AI cluster relies on BlueField offload for tenant isolation, but troubleshooting captures only host-side traffic and finds no explanation for dropped packets. Which repeatable operational safeguard best prevents recurrence of this failure?
Explanation
Correct Answer
This preventive practice addresses the underlying failure (Data-plane offload can move packet processing and filtering out of the host view, hiding the true drop location.) and supports continued assurance through: A controlled denied flow is attributable to the intended DPU enforcement rule and an allowed tenant flow continues as designed.
Incorrect Answers
This prevention control targets another operational risk: A security team changes BlueField firmware on all AI servers but does not retain a recovery image, and one canary device fails to complete boot. The currently reported mechanism remains: Data-plane offload can move packet processing and filtering out of the host view, hiding the true drop location.
This prevention control targets another operational risk: A GPU rack uses BlueField adapters with an unexpected embedded CPU management mode, and host traffic bypasses the data-plane policies administrators expected on the DPU. The currently reported mechanism remains: Data-plane offload can move packet processing and filtering out of the host view, hiding the true drop location.
This prevention control targets another operational risk: A scheduler assigns a training container to a MIG instance by a temporary index, and reconfiguration leaves the container using the wrong partition. The currently reported mechanism remains: Data-plane offload can move packet processing and filtering out of the host view, hiding the true drop location.