CISSP Question #950: Real Exam Question with Answer & Explanation

Question

In a High Availability (HA) environment, what is the PRIMARY goal of working with a virtual router address as the gateway to a network?

Options

• AThe second of two routers can periodically check in to make sure that the first router is
• BThe second of two routers can better absorb a Denial of Service (DoS) attack knowing the first
• CThe first of two routers fails and is reinstalled, while the second handles the traffic flawlessly.
• DThe first of two routers can better handle specific traffic, while the second handles the rest of the

Explanation

In HA environments, a virtual router address (as used in HSRP, VRRP, or GLBP) provides a single, stable gateway IP that remains available even if the primary physical router fails. The virtual address abstracts the gateway from any single physical device.

Common mistakes.

• A. Periodic health-checking between routers (hello messages) is a mechanism used to detect failure, but it is not the primary goal of using a virtual router address as the gateway.
• B. DoS attack absorption is a security concern unrelated to the purpose of a virtual router gateway address, which is focused on availability and failover rather than attack mitigation.
• D. Load distribution of specific traffic types describes load balancing (e.g., GLBP or multiple HSRP groups), which is a secondary use case, not the primary goal of a virtual router gateway address in an HA context.

Concept tested. Virtual router gateway failover in HA (HSRP/VRRP)

Reference. https://learn.microsoft.com/en-us/azure/load-balancer/load-balancer-ha-ports-overview

No community discussion yet for this question.