2.5 Explain VRF Implementation for Network Segmentation SD-WAN-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A university uses VRFs to isolate student (VRF-STU) and faculty (VRF-FAC) networks. A new research portal hosted in VRF-FAC must be accessible to students, but students should not be able to reach any other faculty resources. What is the most secure way to enable this access?

   • ALeak all routes from VRF-FAC into VRF-STU and rely on the firewall to block unwanted traffic.
   • BLeak only the specific route to the research portal from VRF-FAC into VRF-STU, and apply a security policy to restrict traffic to that destination.
   • CCreate a static route in VRF-STU pointing to the portal's IP address via the VRF-FAC next hop.
   • DPlace the research portal in VRF-STU and allow students to access it directly.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A healthcare provider runs a Palo Alto Networks SD-WAN with two VRFs: VRF-PATIENT for patient records and VRF-STAFF for general staff traffic. A new telemedicine application in VRF-STAFF must communicate with a server in VRF-PATIENT. The application requires low latency, and the SD-WAN has both MPLS and broadband links. The provider wants to ensure that only the telemedicine traffic uses the MPLS link, while all other staff traffic uses broadband. What should the provider configure?

   • ALeak the specific routes between the VRFs for the telemedicine application, and create an SD-WAN policy for VRF-STAFF that selects MPLS for the telemedicine traffic and broadband for other traffic.
   • BPlace the telemedicine server in VRF-STAFF and the application in VRF-PATIENT, then configure route leaking.
   • CLeak all routes between the VRFs and create a single SD-WAN policy that selects MPLS for all traffic.
   • DMerge the two VRFs into a single VRF and use QoS to prioritize telemedicine traffic on MPLS.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How do VRFs integrate with SD-WAN policies to enforce segmentation?

   • ASD-WAN policies are applied globally and ignore VRFs
   • BSD-WAN policies can be applied per VRF, allowing different path selection and security rules for each segment
   • CVRFs replace SD-WAN policies, making them unnecessary
   • DVRFs are used only for routing, not for policy enforcement
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of Virtual Routing and Forwarding (VRF) in a network?

   • ATo encrypt traffic between remote sites over the internet
   • BTo combine multiple physical devices into a single logical routing domain
   • CTo prioritize traffic based on application-level quality of service (QoS) policies
   • DTo create multiple independent routing tables within a single physical device
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of route leaking between VRFs?

   • ATo allow controlled communication between different VRFs by sharing specific routes
   • BTo combine all VRFs into a single routing domain
   • CTo prevent any traffic from crossing between VRFs
   • DTo encrypt traffic between VRFs
   Reveal Solution Discussion Select an answer first