Which two key components are related to one firewall per ISP design option for e-commerce? (Choose two.)

Question

Options

• AIt is a common approach to single-homing.
• BThis approach is commonly used in large sites.
• CAny failure on an edge router results in a loss of session.
• DIt has one NAT to two ISP-assigned blocks.
• EIt is difficult to set up and administer.

• A
  11% (3)
• B
  4% (1)
• C
  81% (22)
• E
  4% (1)

Explanation

In the 'one firewall per ISP' e-commerce design, each ISP connection is paired with its own firewall. Two key characteristics emerge: First, any failure on an edge router results in a loss of session (C) - because sessions are statefully tracked per ISP path, a router failure on one ISP link drops all active sessions traversing that link, with no seamless failover at the session level. Second, it involves one NAT to two ISP-assigned address blocks (D) - a single NAT device or mechanism must handle translation between the internal address space and two different public IP blocks assigned by each ISP. Option A is wrong because this is a multi-homing design, not single-homing. Option B (common in large sites) is not a defining characteristic. Option E (difficult to set up) is a subjective statement not cited as a key design component.

No community discussion yet for this question.