400-007 · Question #404
Refer to the exhibit. A company named XYZ needs to apply security policies for end-user browsing by installing a secure web proxy appliance. All the web traffic must be inspected by the appliance…
The correct answer is B. policy-based routing on the collapsed core. Policy-based routing (PBR) is used to direct traffic based on policies other than destination IP address, which is ideal in this case for differentiating between web traffic (to be inspected by the secure web proxy appliance) and other traffic (to be inspected by the NGFW with…
Question
Refer to the exhibit. A company named XYZ needs to apply security policies for end-user browsing by installing a secure web proxy appliance. All the web traffic must be inspected by the appliance, and the remaining traffic must be inspected by an NGFW that has been upgraded with intrusion prevention system functionality. In which two ways must the routing be performed? (Choose two.)
Exhibit
Options
- Aconstraint-based OSPF routing
- Bpolicy-based routing on the collapsed core
- Cpolicy-based routing on the internet edge
- Dpolicy-based routing on firewalls
- Estatic routing on the appliance
How the community answered
(24 responses)- A13% (3)
- B54% (13)
- C4% (1)
- D25% (6)
- E4% (1)
Explanation
Policy-based routing (PBR) is used to direct traffic based on policies other than destination IP address, which is ideal in this case for differentiating between web traffic (to be inspected by the secure web proxy appliance) and other traffic (to be inspected by the NGFW with intrusion prevention). PBR can be implemented at both the collapsed core and the internet edge to ensure traffic is routed according to the defined security policies.
Topics
Community Discussion
No community discussion yet for this question.