Review Questions
Answer the following questions, and then refer to Appendix A, “Answers to Review Questions,” for the answers.
| 1. | Where is an e-commerce design typically implemented?
|
| 2. | What are three functions of SLB?
Providing a private IP address or virtual IP address for each service Providing a public IP address or virtual IP address for each service Resolving DNS requests for destination IP addresses for each service Rewriting source and destination IP or MAC addresses, depending on SLB mode Supporting scaling and high availability by distributing client requests for service across active servers
|
| 3. | What are three characteristics of SLB one-armed mode?
Return traffic does not require special handling. The SLB is directly in line with the default traffic path. The SLB is not directly in line with the default traffic path. The SLB VIP and the real servers are in the same VLAN or subnet. Return traffic can use PBR to deflect appropriate outbound server traffic over to the SLB as next hop. The SLB routes traffic to the real server subnet if the real servers are not in the same VLAN or subnet as the SLB VIPs.
|
| 4. | Where is the firewall perimeter in a basic e-commerce design?
At the core and aggregation layers At the aggregation and access layers Between the aggregation layer router and the e-commerce servers
|
| 5. | Which two choices describe the e-commerce design with two firewall layers when the Cisco ACE is not in Routed mode?
Outbound traffic from servers may need to be directed by PBR or client NAT to the Cisco ACE. The aggregation switch Cisco FWSM routes traffic to the server subnets. The MSFC is directly connected to the Cisco ACE. The MSFC is not directly connected to the Cisco ACE. The SLB is moved to a position where selected traffic to and from the servers does not go through the SLB.
|
You are currently reading a PREVIEW of this book.
Get instant access to over
$1 million worth of books and videos.
Start a Free Trial
