350-701 · Question #203
What is a characteristic of a bridge group in ASA Firewall transparent mode?
The correct answer is C. It includes multiple interfaces and access rules between interfaces are customizable. In ASA Firewall transparent mode, a bridge group logically combines multiple interfaces, and specific access rules can be configured to control traffic flow between these interfaces.
Question
What is a characteristic of a bridge group in ASA Firewall transparent mode?
Exhibit
Options
- AIt allows ARP traffic with a single access rule.
- BIt is a Layer 3 segment and includes one port and customizable access rules.
- CIt includes multiple interfaces and access rules between interfaces are customizable
- DIt has an IP address on its BVI interface and is used for management traffic.
How the community answered
(32 responses)- A6% (2)
- B3% (1)
- C88% (28)
- D3% (1)
Why each option
In ASA Firewall transparent mode, a bridge group logically combines multiple interfaces, and specific access rules can be configured to control traffic flow between these interfaces.
While a transparent firewall generally allows ARP traffic by default, it does not require a single access rule for this, and this is not the primary characteristic of a bridge group itself.
A bridge group in transparent mode operates at Layer 2, not Layer 3, and is designed to include multiple interfaces, not just one.
In transparent firewall mode, the ASA acts as a Layer 2 device, bridging traffic between two or more network segments. A bridge group allows you to group multiple interfaces, and you can define access rules to permit or deny traffic between these specific member interfaces, offering granular control over traffic flow within the bridge group.
While a Bridge-Group Virtual Interface (BVI) does have an IP address and can be used for management, this describes the BVI's function, not the defining characteristic of the bridge group's capability to group interfaces and apply rules between them.
Concept tested: ASA Transparent Firewall Bridge Groups
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/fw_transparent.html#pgfId-1002951
Topics
Community Discussion
No community discussion yet for this question.
