In a virtual system, which of the following ownership relationships is recorded in the traffic diversion table?

Question

Options

• AMAC address and virtual system
• BIP address and virtual system
• CIP address and security policy
• DSecurity policy and virtual system

• A
  7% (3)
• B
  76% (32)
• C
  14% (6)
• D
  2% (1)

Explanation

Option B is correct because a traffic diversion table (also called a traffic steering or forwarding table in virtual system architectures) maps IP addresses to virtual systems, allowing the device to determine which virtual system should process incoming traffic based on the source or destination IP. This is the fundamental mechanism for directing traffic to the correct virtual firewall/security domain.

• A (MAC + virtual system) is wrong because traffic diversion operates at Layer 3 (IP), not Layer 2 (MAC). MAC addresses are link-local and don't persist across routed networks.
• C (IP + security policy) is wrong because security policies are applied within a virtual system after traffic is diverted - they are not part of the diversion/lookup table itself.
• D (Security policy + virtual system) is wrong for the same reason: policy-to-system binding is a configuration relationship, not an entry in the diversion table used for traffic forwarding decisions.

Memory tip: Think of the traffic diversion table as a "lobby directory" - it uses the visitor's IP address (who they are on the network) to send them to the right virtual system (the right office). What happens once they arrive (security policy) is a separate concern.

No community discussion yet for this question.