SY0-501 Question #443: Real Exam Question with Answer & Explanation

Question

An analyst receives an alert from the SIEM showing an IP address that does not belong to the assigned network can be seen sending packets to the wrong gateway. Which of the following network devices is misconfigured and which of the following should be done to remediate the issue?

Options

• AFirewall; implement an ACL on the interface
• BRouter; place the correct subnet on the interface
• CSwitch; modify the access port to trunk port
• DProxy; add the correct transparent interface

Explanation

The alert indicates a device has an incorrect IP address and gateway, pointing to a Layer 2 network segmentation issue on a switch. The misconfiguration likely involves a critical switch port, such as an inter-VLAN routing link, being incorrectly set as an access port.

Common mistakes.

• A. A firewall with an Access Control List (ACL) filters traffic but does not address the underlying issue of a device acquiring an IP address from the wrong network segment.
• B. While routers handle subnets, the problem describes a device acquiring an incorrect IP address and gateway due to a Layer 2 issue (VLANs), not a misconfigured subnet on the router interface itself.
• D. A proxy server operates at the application layer to manage client requests and content, having no direct role in how a device obtains its network layer IP address or communicates with a gateway.

Concept tested. Switch VLAN port mode configuration for inter-VLAN routing

Reference. https://www.cisco.com/c/en/us/support/docs/lan-switching/inter-vlan-routing/41606-howto-8.html

No community discussion yet for this question.