10.5 Explain Layer 3 Deployment Routing Considerations NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A large enterprise is designing a Layer 3 deployment with multiple PA-Series firewalls in a hub-and-spoke topology. The hub firewall connects to the core network, and each spoke firewall connects to a different department subnet. The network team wants to minimize routing table size and improve convergence. Which routing design practice should be applied?

   • AUse BGP with full mesh peering between all firewalls.
   • BConfigure static routes on each spoke firewall for all department subnets.
   • CUse route summarization on the hub firewall to advertise aggregate routes to the spokes.
   • DEnable OSPF on all interfaces and let the protocol automatically summarize routes.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A network engineer is configuring route redistribution between OSPF and BGP on a PA-Series firewall. The firewall is redistributing OSPF routes into BGP and BGP routes into OSPF. The engineer notices that some OSPF routes are being advertised back into OSPF after being learned from BGP, causing a routing loop. What is the most effective way to prevent this feedback loop?

   • ADisable OSPF on the interface facing BGP.
   • BIncrease the administrative distance of BGP routes to make them less preferred.
   • CUse a higher OSPF metric for redistributed BGP routes.
   • DUse route maps to filter redistributed routes and prevent OSPF routes learned from BGP from being re-advertised into OSPF.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which technique is commonly used to prevent routing loops during route redistribution?

   • AIncreasing the metric of all redistributed routes
   • BRoute tagging and filtering
   • CUsing a single routing protocol for the entire network
   • DDisabling route summarization
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   For a small, stable network with a single connection to a remote site, which routing method is typically the most efficient?

   • ABGP
   • BOSPF
   • CRIP
   • DStatic routes
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has two PA-Series firewalls in an active/active configuration, each connected to a different ISP. The firewalls are configured with OSPF to exchange routes with the internal network. The network team wants to ensure that if one ISP link fails, all traffic is automatically redirected to the remaining ISP without manual intervention. What should be configured?

   • AUse static routes with a lower administrative distance for the primary ISP and a higher one for the backup.
   • BConfigure ECMP with both default routes and enable link monitoring to remove the failed route from the routing table.
   • CConfigure BGP with the two ISPs and rely on BGP's built-in failover.
   • DUse policy-based forwarding to send traffic to the primary ISP and a backup rule for the secondary.
   Reveal Solution Discussion Select an answer first