Question 370
At the Jasperfield airport network, large application sessions break after a new default route sends return packets through a different security path. Which explanation best accounts for the concern?
Explanation
Correct Answer
The problem stems from the fact that a stateful security device may reject return flows when paths are asymmetric. A correct solution would trace both directions and align routing or firewall session policies with the approved topology and check that a bidirectional trace and test session confirm permitted symmetric or supported paths. This result addresses the stated challenge at the Jasperfield airport network.
Incorrect Answers
The option states: Temperature sensitive optical hardware can fall outside receive tolerance and interrupt the link. By contrast, the current situation is governed by: a stateful security device may reject return flows when paths are asymmetric. Choosing this alternative would leave the question’s specific root-cause explanation unresolved.
broad speculative configuration changes can expand an outage and obscure the original fault, rather than merely a monitoring or presentation issue. The offered alternative applies that mechanism: Broad speculative configuration changes can expand an outage and obscure the original fault. The reported facts point to a different controlling condition: a stateful security device may reject return flows when paths are asymmetric. The alternative does not directly settle the required root-cause explanation.
A poorly scoped route import can undermine segmentation without changing physical VLANs. Its technical scope is explained by: a poorly scoped route import can undermine segmentation without changing physical VLANs, rather than merely a monitoring or presentation issue. In this question, the decisive issue is: a stateful security device may reject return flows when paths are asymmetric. That is why the offered option is not the most direct root-cause explanation.