Which of the following conditions can be matched by policy routing? (Multiple choice)

Question

Options

• ASource safe zone
• BSource MAC address
• CSource IP address
• DApplication

• A
  76% (22)
• B
  24% (7)

Explanation

Policy routing matches traffic based on Layer 3 and above criteria, plus zone-level constructs on security-aware devices. Source safe zone (A) is valid because firewalls and security gateways (such as Huawei USG devices) use security zones as a fundamental traffic classification unit, and policy routing can use the ingress zone as a match condition. Source IP address (C) is the classic policy-based routing (PBR) match condition - routing decisions are made per-source rather than per-destination. Application (D) is valid in modern application-aware or intelligent routing systems that use deep packet inspection (DPI) to identify traffic and apply routing policies accordingly.

Source MAC address (B) is wrong because MAC addresses are a Layer 2 construct - they are rewritten at each hop and are not visible or meaningful at the Layer 3 routing decision point where policy routing operates.

Memory tip: Think "Layer 3 and above, plus zone" - policy routing lives at the IP layer and higher, so anything below IP (like MAC addresses at Layer 2) is off the table. If you remember that modern policy routing is zone-aware and application-aware in addition to IP-aware, the three correct answers fall naturally into place.

No community discussion yet for this question.