300-710 SNCF: Securing Networks with Cisco FirewallsDemo

By Cisco · Question Mode

QuestionQ19

Configuration

An engineer is monitoring traffic from the sales and product-development departments, which reside on two distinct networks. What must be configured to preserve data privacy for both departments?

  • A Use passive IDS ports for both departments.
  • B Use a dedicated IPS inline set for each department to maintain traffic separation.
  • C Use 802.1Q inline set Trunk interfaces with VLANs to maintain logical traffic separation.
  • D Use one pair of inline set in TAP mode for both departments.
Explanation

IEEE 802.1Q trunk interfaces use VLAN tags to keep traffic for separate networks logically isolated while it traverses shared inline inspection interfaces. This preserves separation between the sales and product-development traffic.

Community Discussion

No comments yet. Be the first to start the discussion!