フリー問題

Palo Alto Networks Certified Next-Generation Firewall Engineer のフリー問題 6 / 20 問目

問題文

A hospital wants the firewall to inspect traffic between two existing VLANs without moving the default gateway for either VLAN off the core switch. The engineer plans to use Layer 2 interfaces on the firewall. What does the Layer 2 deployment provide in this design?

選択肢

  1. It switches frames between interfaces that belong to the same VLAN object while still applying security policy between the zones assigned to those interfaces.
  2. It terminates each VLAN on the firewall with its own IP address, so the firewall becomes the default gateway for both VLANs and routes between them.
  3. It copies frames to the firewall for inspection only, so no traffic is forwarded.
  4. It binds two ports together so that frames pass through without any Layer 2 or Layer 3 address on the interfaces, keeping the pair as one link.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。