Implementing Cisco Edge Network Security Solutions (SENSS, legacy) — Question 6

A customer has two ISPS for Internet traffic and a firewall with one interface configured to each ISP. An engineer discovers there is asymmetric routing when using the Internet, traffic leaving is using ISP 1 and returning traffic is using ISP 2. Which feature fixes this connectivity?

Answer options

• A. network address translation
• B. failover
• C. security zones
• D. routed mode
• E. multiple contexts

Correct answer: B

Explanation

The correct answer is B, failover, because it allows the firewall to manage traffic through the same ISP for both outgoing and incoming connections, ensuring symmetric routing. The other options do not address the routing path directly; for example, network address translation (A) modifies IP addresses but does not influence the routing paths, while security zones (C), routed mode (D), and multiple contexts (E) are more about segmentation and management rather than solving asymmetric routing.