Which two technologies enable multilayer segmentation? (Choose two.)

The correct answer is A. policy-based routing D. firewalls. Multilayer segmentation means enforcing traffic boundaries using criteria from multiple OSI layers simultaneously. Policy-based routing (PBR) makes forwarding decisions based on L3 source/destination addresses, L4 ports, or even application-layer attributes - routing different…

Designing Security

Question

Options

Apolicy-based routing
Bsegment routing
Cdata plane markings
Dfirewalls
Efilter lists

How the community answered

(31 responses)

A
74% (23)
B
3% (1)
C
6% (2)
E
16% (5)

Explanation

Multilayer segmentation means enforcing traffic boundaries using criteria from multiple OSI layers simultaneously. Policy-based routing (PBR) makes forwarding decisions based on L3 source/destination addresses, L4 ports, or even application-layer attributes - routing different traffic classes through different paths or applying different policies per segment. Firewalls inspect and enforce rules at L3 (IP), L4 (TCP/UDP), and up through L7 (application-layer inspection with NGFW), making them inherently multilayer segmentation tools. Segment routing (B) is a source-routing mechanism for path selection, not a segmentation boundary technology. Data plane markings (C) such as DSCP are QoS classification labels, not segmentation controls. Filter lists / ACLs (E) operate primarily at L3/L4 but are static and unidirectional, lacking the dynamic, stateful, multilayer inspection capability that qualifies as true multilayer segmentation.

Topics

#network segmentation#policy-based routing#firewalls#multilayer segmentation

Community Discussion

No community discussion yet for this question.

Full 400-007 Practice