350-701 · Question #611
Which firewall deployment mode allows inspection of traffic between servers in the same IP subnet?
The correct answer is D. transparent. A transparent firewall deployment allows inspection of traffic between servers within the same IP subnet by operating at Layer 2 without modifying IP routing.
Question
Which firewall deployment mode allows inspection of traffic between servers in the same IP subnet?
Options
- Arouted
- Bmulticontext
- Cvirtual
- Dtransparent
How the community answered
(23 responses)- B4% (1)
- D96% (22)
Why each option
A transparent firewall deployment allows inspection of traffic between servers within the same IP subnet by operating at Layer 2 without modifying IP routing.
Routed mode firewalls operate at Layer 3 and require IP addresses on their interfaces, serving as a default gateway and thus performing routing decisions, which is not suitable for inspecting traffic within the same subnet without altering network topology.
Multicontext mode refers to running multiple virtual firewalls on a single physical device, which is a deployment architecture, not a mode for traffic inspection within a subnet.
Virtual mode is not a standard firewall deployment mode; firewalls can be virtual appliances, but this doesn't describe how they inspect intra-subnet traffic.
In transparent mode, a firewall acts as a Layer 2 bridge and can filter traffic between devices on the same IP subnet without being a default gateway, enabling inspection of intra-subnet traffic while remaining invisible to the network topology.
Concept tested: Transparent firewall deployment mode
Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/concepts_modes.html#pgfId-1025537
Topics
Community Discussion
No community discussion yet for this question.