nerdexam
Cisco

300-320 · Question #155

An organization is deploying a new load balancing environment to support sensitive applications. The security requirements include discrete IP segments used for VIPs and for the application hosts…

The correct answer is A. router. Router mode (also called routed mode) places the load balancer as a Layer 3 device in the network path. The client-facing side has one IP subnet hosting the Virtual IP addresses (VIPs), and the server-facing side has a separate IP subnet hosting the real application servers…

Advanced Data Center Networks

Question

An organization is deploying a new load balancing environment to support sensitive applications. The security requirements include discrete IP segments used for VIPs and for the application hosts. What load balancer mode meets the requirements?

Options

  • Arouter
  • Bbridge
  • Ctransparent
  • Dpass-through

How the community answered

(29 responses)
  • A
    83% (24)
  • B
    3% (1)
  • C
    10% (3)
  • D
    3% (1)

Explanation

Router mode (also called routed mode) places the load balancer as a Layer 3 device in the network path. The client-facing side has one IP subnet hosting the Virtual IP addresses (VIPs), and the server-facing side has a separate IP subnet hosting the real application servers. This discrete IP segmentation is a fundamental characteristic of router mode and satisfies the security requirement for isolated IP segments. In contrast, transparent/bridge mode keeps VIPs and servers on the same IP subnet (Layer 2), which would not meet the requirement for discrete IP segments. Pass-through mode does not perform full load balancing.

Topics

#load balancer#router mode#VIP segmentation#application security

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice