フリー問題

Palo Alto Networks Certified Next-Generation Firewall Engineer のフリー問題 2 / 20 問目

問題文

A retailer must insert a firewall into a link between a distribution switch and a router without changing addressing on either device. Which characteristic of a virtual wire deployment makes this possible?

選択肢

  1. The firewall assigns both interfaces to the same VLAN object, so the frames are switched between them and the neighbors keep the addresses they already have.
  2. The firewall copies the frames to its dataplane and forwards the originals untouched, so no addressing change is needed on the neighbors.
  3. The two bound interfaces carry no Layer 2 or Layer 3 address, so the firewall applies policy and passes the frame on without taking part in switching or routing decisions.
  4. The firewall learns the addresses of both neighbors and answers on their behalf, so each side believes it is still talking directly to the other device.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。