10.5 Explain Layer 3 Deployment Routing Considerations NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a common pitfall in route redistribution that can lead to routing loops?

   • AConfiguring route summarization on the firewall
   • BRedistributing routes back into the protocol from which they were originally learned
   • CUsing different metrics for the same route in different protocols
   • DSetting a high administrative distance for redistributed routes
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has a small network with two PA-Series firewalls in a single location. The network consists of three subnets and a single upstream ISP connection. The network team wants a simple, predictable routing solution that requires minimal configuration and no dynamic routing protocol. What is the most appropriate routing protocol choice?

   • AStatic routing with a default route to the ISP and static routes for internal subnets.
   • BOSPF with all subnets in Area 0.
   • CBGP with the ISP and internal subnets.
   • DRIP (Routing Information Protocol) for dynamic updates.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A service provider is designing a Layer 3 network with multiple PA-Series firewalls. The network has two core firewalls in an active/active configuration, each connected to a different upstream ISP. The firewalls also connect to multiple customer edge devices via BGP. The design must ensure that customer traffic is load-balanced across both ISPs, but if one ISP fails, all traffic must automatically fail over to the remaining ISP. Additionally, the routing table on the firewalls must be kept as small as possible. Which design best meets these requirements?

   • AUse OSPF with equal-cost paths to both ISPs and rely on OSPF's fast convergence.
   • BUse BGP with local preference to prefer one ISP and a static default route for the other.
   • CUse ECMP for the default routes from both ISPs, and configure BGP route summarization for customer routes.
   • DUse static routes for both ISPs with different administrative distances and no ECMP.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which routing protocol is most appropriate for connecting to an Internet Service Provider (ISP) in a multi-homed environment?

   • AOSPF
   • BRIP
   • CStatic routes
   • DBGP
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a key limitation of using static routes?

   • AThey are less secure than dynamic routes
   • BThey do not automatically adapt to network topology changes
   • CThey cannot be used with dynamic routing protocols
   • DThey require a routing protocol to be running on all interfaces
   Reveal Solution Discussion Select an answer first