Discuss Cisco 300-610 Exam Topic 6 Question 104

Refer to the exhibit.

The security team created a new security policy that requires certain types of traffic to be subject to deep packet inspection The traffic types are

* internet traffic to application servers

* internet traffic to corporate users

* partner network traffic to application servers

* partner network traffic to corporate users

Where must the next-generation firewalls be inserted to implement the new policy?

Aone-armed insertion from the core switch cluster

Binline insertion between the edge router duster and the core switch duster

Cone-armed insertion from the ACl border leaf cluster

Dinline insertion between the user network switch cluster and the core cluster

Suggested Answer: C

Get Premium 300-610 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

32 comments · newest first

Jolanda 11 months ago

I’m leaning towards D, but I’m not convinced it’s the best choice.

Linette 11 months ago

One-armed insertion is less effective, so I’d skip A.

Lisha 11 months ago

Wait, are we sure about that? What if there's a bottleneck?

Mireya 11 months ago

Totally agree, B is the way to go!

Ressie 12 months ago

I think option B makes the most sense for deep packet inspection.

Lindsey 12 months ago

I vaguely recall something about one-armed insertion being less effective for deep packet inspection. Maybe I should lean towards inline options?

Mitsue 1 year ago

I feel like option B makes the most sense since it mentions being between the edge router and core switch, but I could be wrong.

Celestine 1 year ago

I think we practiced a similar question where the firewalls were placed inline. That might be the right approach here too.

Marleen 1 year ago

I remember we discussed deep packet inspection in class, but I'm not sure if the firewalls should be inline or one-armed.

Brianne 1 year ago

I'm feeling pretty confident about this one. The question is giving me a clear picture of the network topology and the specific traffic that needs to be inspected. I'll methodically work through the options to find the best solution.

Francine 1 year ago

Okay, I think I've got this. The key is to identify the choke points where all the relevant traffic types converge. That's where the firewalls should be inserted for maximum visibility and control.

Joseph 1 year ago

Hmm, I'm a bit confused by the different network clusters and where the traffic is flowing. I'll need to re-read the question and think through the requirements step-by-step.

Sylvia 1 year ago

This looks like a tricky network topology question. I'll need to carefully analyze the traffic types and network segments to determine the best insertion point for the next-gen firewalls.

Makeda 2 years ago

I'm just hoping the exam doesn't have any trick questions like 'What color is the Pope's Mercedes?' Gotta stay on our toes, folks!

Kristel 2 years ago

I'm not sure about that. I think one-armed insertion from the ACL border leaf cluster might be a better option for implementing the new security policy.

Dawne 2 years ago

Wow, this question really tests your network topology knowledge. I bet the instructor is trying to see if we've been paying attention in class!

Francis 2 years ago

↳ replying to Dawne

User 2: Yeah, that makes sense. It would allow for deep packet inspection of the specified traffic types.

Mirta 2 years ago

↳ replying to Dawne

User 1: I think the next-generation firewalls should be inserted inline between the edge router cluster and the core switch cluster.

Shawna 2 years ago

I agree with Melodie. Placing the firewalls inline at that point would allow for deep packet inspection of the specified traffic types.

Genevieve 2 years ago

Hmm, I'm not sure. Option D also seems like it could work, but I think B is the better choice. Gotta keep those packets under close inspection!

Shenika 2 years ago

↳ replying to Genevieve

User 2: Yeah, I agree. We need to keep those packets under close inspection to implement the new security policy.

Wenona 2 years ago

↳ replying to Genevieve

User 1: I think option B is the best choice for inserting the next-generation firewalls.

Truman 2 years ago

I agree with Cecily. Option B is the right answer here. Placing the firewalls inline in that location will cover all the required traffic types.

Graciela 2 years ago

↳ replying to Truman

Yes, it will cover all the necessary traffic types.

Rory 2 years ago

↳ replying to Truman

I agree, placing the firewalls inline there makes sense.

Lanie 2 years ago

↳ replying to Truman

I think option B is the best choice.

Melodie 2 years ago

I think the next-generation firewalls should be inserted between the edge router cluster and the core switch cluster.

Cecily 2 years ago

Option B seems the most logical choice to implement the new security policy. Inline insertion between the edge router cluster and the core switch cluster will ensure all traffic is subject to deep packet inspection.

Louann 2 years ago

↳ replying to Cecily

It might work, but option B ensures that all traffic, including internet and partner network traffic, is subject to deep packet inspection.

Tarra 2 years ago

↳ replying to Cecily

Wouldn't inserting the firewalls between the user network switch cluster and the core cluster also work?

Arminda 2 years ago

↳ replying to Cecily

I agree, inserting the next-generation firewalls between the edge router cluster and the core switch cluster will provide the necessary deep packet inspection.

Felicitas 2 years ago

↳ replying to Cecily

Option B seems like the best choice for this scenario.

Cisco 300-610 Exam - Topic 6 Question 104 Discussion