nerdexam
Cisco

300-620 · Question #310

Refer to the exhibit. An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action…

The correct answer is B. Change Function Type to GoTo. For a virtual firewall L4-L7 device object with a single network adapter deployed in routed mode, setting the Function Type to "GoTo" completes its configuration. This allows the device to process routed traffic effectively without complex redirect policies.

ACI Integrations

Question

Refer to the exhibit. An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?

Exhibit

300-620 question #310 exhibit

Options

  • AEnable Promiscuous Mode.
  • BChange Function Type to GoTo.
  • CChange context awareness to Multiple.
  • DAdd an outside interface to the cluster interfaces.

How the community answered

(51 responses)
  • A
    16% (8)
  • B
    75% (38)
  • C
    6% (3)
  • D
    4% (2)

Why each option

For a virtual firewall L4-L7 device object with a single network adapter deployed in routed mode, setting the Function Type to "GoTo" completes its configuration. This allows the device to process routed traffic effectively without complex redirect policies.

AEnable Promiscuous Mode.

Enabling Promiscuous Mode is typically associated with tap or inspection services that need to see all traffic, not a firewall operating in routed mode with a single adapter.

BChange Function Type to GoTo.Correct

In Cisco ACI, for an L4-L7 service device with a single network interface operating in routed mode, the "GoTo" function type is selected to allow the device to process traffic that is routed through it. This type simplifies the service graph by directing traffic to the device without needing to define explicit redirect policies associated with multiple interfaces.

CChange context awareness to Multiple.

Changing context awareness to "Multiple" is incorrect because the problem explicitly states the device has a "single network adapter."

DAdd an outside interface to the cluster interfaces.

Adding an outside interface to cluster interfaces is a step in configuring the service graph itself, but not the final action to complete the device object configuration for a single-adapter routed device.

Concept tested: ACI L4-L7 Service Device GoTo Function

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/l4-l7-services/cisco-aci-l4l7-services-guide-501/l4-l7-services-chapter-010.html

Topics

#L4-L7 service integration#Service graph#Virtual firewall#Routed mode

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice