SNCF — Securing Networks with Firepower — Question 285

How is IRB on next-generation firewall running in transparent mode supported?

Answer options

• A. IRB requires an external switch.
• B. IRB is supported only in routed mode.
• C. IPv4 routes must be configured on the BVI.
• D. IPv4 routes must be configured on the physical interface.

Correct answer: C

Explanation

The correct answer is C because when operating in transparent mode, IRB requires that IPv4 routes be configured on the Bridge Virtual Interface (BVI) to facilitate traffic handling. Options A and B are incorrect as they misrepresent the requirements for IRB in this context, while D is also wrong because routing must specifically be done on the BVI, not the physical interface.