300-320 Question #302: Real Exam Question with Answer & Explanation

The correct answer is D: two-armed mode. In two-armed (router) mode, the Server Load Balancer (SLB) has separate network interfaces facing the client side and the server side. Inbound traffic is directed to a Virtual IP (VIP) on the SLB, which translates it (DNAT) and forwards it to a real server. Because SNAT is not al

Question

Source traffic is sent to a VIP on an SLB device, which in turn is routed to the destination server. Return traffic is policy-based routed back to the SLB. Which SLB design has been implemented?

Options

Arouter mode
Binline bridge mode
Cone-armed mode
Dtwo-armed mode

Explanation

In two-armed (router) mode, the Server Load Balancer (SLB) has separate network interfaces facing the client side and the server side. Inbound traffic is directed to a Virtual IP (VIP) on the SLB, which translates it (DNAT) and forwards it to a real server. Because SNAT is not always applied, return traffic from servers would naturally bypass the SLB - so policy-based routing (PBR) is configured on the upstream router to redirect server return traffic back through the SLB. One-armed mode uses a single interface with PBR to pull traffic onto the SLB but differs in topology. Inline bridge mode places the SLB transparently in the path. Router mode is sometimes used interchangeably with two-armed mode, but 'two-armed' most precisely describes this topology.

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice