You need to provide a security layer for an existing core network. You need an inspection module that operates at layer 2, is completely transparent and does not impact the existing IP structure or…

Question

Options

• AExternal Virtual Router
• BInternal Virtual Router
• CVirtual System in Bridge Mode
• DVirtual Switch
• EVirtual System

• A
  5% (2)
• B
  2% (1)
• C
  79% (33)
• D
  12% (5)
• E
  2% (1)

Explanation

Virtual System in Bridge Mode is correct because it operates at Layer 2 (the Data Link layer) as a transparent "bump-in-the-wire," forwarding frames without requiring its own IP address on the inspection path - meaning it introduces zero changes to the existing IP addressing scheme or routing/control protocols like OSPF or BGP.

Why the distractors fail:

• A & B (External/Internal Virtual Router): Both operate at Layer 3, requiring IP address restructuring and impacting routing - the opposite of transparent.
• D (Virtual Switch): Works at Layer 2 but is purely a forwarding device with no security inspection capability.
• E (Virtual System): A standard Virtual System acts as a full firewall with its own Layer 3 interfaces, requiring IP reconfiguration to route traffic through it.

Memory tip: Think "Bridge = Invisible at L2" - bridges predate routers and were always transparent to IP. So Bridge Mode = Layer 2 + transparent + no IP impact. If the question mentions "transparent," "Layer 2," or "no IP changes," bridge mode is almost always the answer.

No community discussion yet for this question.