エンジニアが新しいCisco Secure Firewallを実装しています。このファイアウォールは、以下の3つのサブネット間のトラフィックをフィルタリングする必要があります。
* LAN 192.168.101.0724
* DMZ 192.168 200.0/24
*WAN 10.0.0.0/30
エンジニアはどのファイアウォール モードを実装する必要がありますか?
正解:C
To filter traffic between multiple subnets, the engineer must implement the firewall in routed mode. In routed mode, the firewall operates as a Layer 3 device, capable of routing traffic between different IP subnets. This mode is appropriate for filtering traffic between LAN, DMZ, and WAN subnets.
Steps to configure routed mode:
* Access the firewall's management interface.
* Configure interfaces for each subnet (LAN, DMZ, WAN) with appropriate IP addresses and network masks.
* Define security zones and apply access control policies to filter traffic as required.
This ensures that the firewall can inspect and route traffic between the different subnets, providing the necessary security and control.
References:Cisco Secure Firewall Threat Defense Configuration Guide, Chapter on Routed Mode Configuration.