300-820 · Question #116
An organization wants to be able to call IP addresses and URI addresses. An engineer must configure Cisco Expressways to manage this request from the endpoints in the organization. How would the…
The correct answer is D. Set calls to unknown IP addresses to indirect on the Expressway-C and direct on the. To route calls to external IP addresses through the Expressway pair, the correct approach is: set 'calls to unknown IP addresses' to Indirect on Expressway-C, which forces those calls through the traversal zone toward Expressway-E rather than directly to an external IP; and set…
Question
An organization wants to be able to call IP addresses and URI addresses. An engineer must configure Cisco Expressways to manage this request from the endpoints in the organization. How would the engineer configure the Expressways to allow these calls to be completed to external IP addresses?
Options
- ASet calls to unknown IP addresses to direct on the Cisco Expressways, and add a search rule on
- BSet calls to unknown IP addresses to indirect on the Cisco Expressways, and add a search rule
- CUse search rules to manage calls to IP addresses, and the direct/indirect setting on the
- DSet calls to unknown IP addresses to indirect on the Expressway-C and direct on the
How the community answered
(66 responses)- A5% (3)
- B8% (5)
- C3% (2)
- D85% (56)
Explanation
To route calls to external IP addresses through the Expressway pair, the correct approach is: set 'calls to unknown IP addresses' to Indirect on Expressway-C, which forces those calls through the traversal zone toward Expressway-E rather than directly to an external IP; and set it to Direct on Expressway-E, which allows Expressway-E to send calls straight to the external IP address. This respects the firewall architecture - Expressway-C cannot initiate direct connections outbound, but Expressway-E, being in the DMZ or public network, can. Answer D correctly captures this asymmetric configuration.
Topics
Community Discussion
No community discussion yet for this question.