SNCF — Securing Networks with Firepower — Question 211

Within an organization’s high availability environment where both firewalls are passing traffic, traffic must be segmented based on which department it is destined for. Each department is situated on a different LAN. What must be configured to meet these requirements?

Answer options

• A. redundant interfaces
• B. span EtherChannel clustering
• C. high availability active/standby firewalls
• D. multi-instance firewalls

Correct answer: D

Explanation

The correct answer is D, as multi-instance firewalls allow for the segmentation of traffic based on different departments, each operating on separate LANs. The other options do not provide the necessary functionality for traffic segregation in this scenario. Redundant interfaces, span EtherChannel clustering, and high availability active/standby firewalls focus on availability and load balancing rather than traffic segmentation.