10.5 Explain Layer 3 Deployment Routing Considerations NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company is deploying a new PA-Series firewall in a remote site that connects to the corporate headquarters via a WAN link. The remote site has a small LAN with two subnets. The WAN link is a private MPLS connection, and the corporate network uses OSPF. The network team wants to minimize configuration complexity and ensure that the remote site can reach all corporate networks without manual route updates. However, they also want to avoid the risk of routing loops and want the solution to be resilient to WAN link failures. What is the best routing approach?

   • AUse RIP over the WAN link for simplicity.
   • BUse BGP over the WAN link to exchange routes with the corporate router.
   • CRun OSPF over the WAN link and advertise the remote site's subnets into OSPF.
   • DUse static routes for all corporate networks and a default route to the WAN.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a key benefit of segmenting a network into multiple routing domains or areas?

   • AIt increases the number of routes in the global routing table
   • BIt allows all segments to share the same IP address space
   • CIt eliminates the need for firewalls between segments
   • DIt reduces the impact of a routing failure to a single segment
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A service provider uses BGP to exchange routes with its customers. A customer has a PA-Series firewall that connects to the provider via a single BGP session. The customer wants to advertise its internal subnets (192.168.0.0/16) to the provider, but these subnets are not directly connected to the firewall; they are learned via OSPF from the internal network. The firewall must also accept a default route from the provider and redistribute it into OSPF for internal devices. What is the correct BGP configuration on the customer's firewall?

   • AUse the 'network' command to advertise 192.168.0.0/16 in BGP without redistribution.
   • BRedistribute OSPF routes into BGP using a route map to advertise only 192.168.0.0/16, and redistribute the BGP default route into OSPF.
   • CConfigure BGP to advertise only directly connected networks and use a static route for 192.168.0.0/16.
   • DRedistribute all OSPF routes into BGP without any filtering.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which routing design practice helps reduce the size of routing tables and improve stability?

   • AConfiguring static routes for every remote network
   • BDisabling all dynamic routing protocols
   • CUsing a single routing protocol for all networks
   • DRoute summarization
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of route redistribution in a Layer 3 firewall deployment?

   • ATo replace dynamic routing protocols with static routes for all networks
   • BTo automatically assign IP addresses to interfaces in different routing domains
   • CTo translate routes learned from one routing protocol into another protocol's format so they can be advertised
   • DTo filter all routes that are not directly connected to the firewall
   Reveal Solution Discussion Select an answer first