A company is deploying a new network design in which the border router has three interfaces. Interface Serial0/0/0 connects to the ISP, GigabitEthernet0/0 connects to the DMZ, and GigabitEthernet/01 connects to the internal private network. Which type of traffic would receive the least amount of inspection (have the most freedom of travel)?
- traffic that is going from the private network to the DMZ
- traffic that is returning from the DMZ after originating from the private network
- traffic that originates from the public network and that is destined for the DMZ
- traffic that is returning from the public network after originating from the private network
Explanation: Most traffic within an organization originates from a private IP address. The amount of inspection done to that traffic depends on its destination or whether traffic that is going to that private IP address originated the connection. The demilitarized zone typically holds servers. Traffic that is destined to those servers is filtered based on what services are being provided by the server (HTTP, HTTPS, DNS, etc.).
Exam with this question: CCNA Security Chapter 4 Exam Answers
Exam with this question: Network Security 1.0 Practice Final Exam Answers
Please login or Register to submit your answer