nerdexam
Cisco

300-320 · Question #108

Which option is a recommended firewall topology?

The correct answer is C. using two firewalls in active/active mode. Using two firewalls in active/active mode is the recommended topology because it provides both high availability (redundancy) and load distribution across both devices simultaneously. If one firewall fails, the other continues to pass traffic. Choice A is flawed because…

Security Services

Question

Which option is a recommended firewall topology?

Options

  • Ausing two firewalls with stateful failover switched mode
  • Busing one firewall with NAT enabled in transparent mode
  • Cusing two firewalls in active/active mode
  • Dusing one firewall with stateful failover enabled in routed mode

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    88% (29)
  • D
    3% (1)

Explanation

Using two firewalls in active/active mode is the recommended topology because it provides both high availability (redundancy) and load distribution across both devices simultaneously. If one firewall fails, the other continues to pass traffic. Choice A is flawed because 'switched mode' is not a standard failover topology. Choice B is invalid because transparent mode operates at Layer 2 and does not perform NAT. Choice D uses only a single firewall, which is a single point of failure - stateful failover alone does not eliminate this risk when there is only one device in the topology.

Topics

#firewall topology#active/active mode#firewall high availability#redundant firewalls

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice