Which two statements are correct about using firewall filters on EX Series switches? (Choose two.)

Question

Options

• AYou can deploy only stateless firewall filters on an EX Series switch.
• BYou can only apply firewall filters to Layer 2 traffic on an EX Series switch.
• CYou can apply firewall filters to both Layer 2 and Layer 3 traffic on an EX Series switch.
• DYou can deploy both stateless and stateful firewall filters on an EX Series switch.

• A
  75% (15)
• B
  10% (2)
• D
  15% (3)

Explanation

A is correct because you can deploy only stateless firewall filters on an EX Series switch. A stateless firewall filter is a filter that evaluates each packet individually based on the header information, such as source and destination addresses, protocol, and port numbers. A stateless firewall filter does not keep track of the state or context of a packet flow, such as the sequence number, flags, or session information. EX Series switches support only stateless firewall filters, which are also called access control lists (ACLs) or packet filters. C is correct because you can apply firewall filters to both Layer 2 and Layer 3 traffic on an EX Series switch. Layer 2 traffic is traffic that is switched within a VLAN or a bridge domain, while Layer 3 traffic is traffic that is routed between VLANs or networks. EX Series switches support three types of firewall filters: port (Layer 2) firewall filters, VLAN firewall filters, and router (Layer 3) firewall filters. You can apply these filters to different interfaces and directions to control the traffic entering or exiting the switch.

No community discussion yet for this question.