Cisco Exam 500-220 Topic 4 Question 67 Discussion

Actual exam question for Cisco's 500-220 exam

Question #: 67
Topic #: 4

A Cisco Meraki MX security appliance is trying to route a packet to the destination IP address of 172.18.24.12. Which routes contained in its routing table does it select?

AAuto VPN route 172.18.0.0/16

Bstatic route 172.16.0.0/12

Cnon-Meraki VPN route 172.18.24.0/24

Ddirectly connected 172.18.16.0/20

Show Suggested Answer

Suggested Answer: C

Route Priority

Each type of route configured on the MX has a specific priority in comparison with other types of routes. The priority is as follows:

Directly Connected

Client VPN

Static Routes

AutoVPN Routes

Non-Meraki VPN Peers

BGP learned Routes

NAT*

https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior

by Rosalyn at Sep 15, 2024, 06:17 PM

Limited Time Offer

25%

Off

Get Premium 500-220 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Franchesca

2 months ago

I'm betting on Option D. Gotta love those directly connected routes! They're like the superheroes of the routing table.

upvoted 0 times

Lizette

1 months ago

User2: Yeah, I agree. They're like the superheroes of the routing table.

upvoted 0 times

...

Lazaro

1 months ago

User3: Definitely, they make routing packets a breeze.

upvoted 0 times

...

Laine

1 months ago

I think Option D is the way to go. Directly connected routes are reliable.

upvoted 0 times

...

Annamae

2 months ago

Option A? Really? The Auto VPN route? I think the Meraki appliance would be smart enough to avoid that. *chuckles*

upvoted 0 times

Rolland

25 days ago

User3: I'm not so sure, I think it might go for the non-Meraki VPN route instead.

upvoted 0 times

...

Blair

26 days ago

User2: Yeah, I agree. It seems like the most specific route for that destination IP.

upvoted 0 times

...

Kathrine

1 months ago

I think the Meraki appliance would choose the directly connected route.

upvoted 0 times

...

Therese

2 months ago

I'm not sure, but I think the non-Meraki VPN route 172.18.24.0/24 could also be a valid option for the appliance to select.

upvoted 0 times

...

Ettie

2 months ago

I agree with Marilynn, the directly connected route seems like the most specific match for the destination IP address.

upvoted 0 times

...

Lacey

2 months ago

Hmm, I'm torn between Options B and D. 172.16.0.0/12 is a larger subnet, but 172.18.16.0/20 is more specific. I'll have to think this one through.

upvoted 0 times

Caitlin

1 months ago

You're right, I'll go with option D, the directly connected route 172.18.16.0/20. Thanks for the input!

upvoted 0 times

...

Maurine

1 months ago

I see your point, but the more specific route in option D might be the better choice for this packet.

upvoted 0 times

...

Francisca

2 months ago

But option B, the static route 172.16.0.0/12, covers a larger range. Maybe that's a better choice.

upvoted 0 times

...

Flo

2 months ago

I think you should go with option D, the directly connected route 172.18.16.0/20.

upvoted 0 times

...

Armanda

3 months ago

I'm going with Option C. It's the most specific route that matches the destination IP address.

upvoted 0 times

Nobuko

1 months ago

I agree with Option C. It's important to choose the most specific route for routing packets.

upvoted 0 times

...

Elenora

2 months ago

I would go with Option D. The directly connected route seems like the most efficient choice.

upvoted 0 times

...

Joanne

2 months ago

I think Option C is the best choice too. It matches the destination IP address exactly.

upvoted 0 times

...

Marilynn

3 months ago

I think the Cisco Meraki MX security appliance will select the directly connected route 172.18.16.0/20.

upvoted 0 times

...

Peter

3 months ago

Option D seems like the obvious choice here. The destination IP address is within the 172.18.16.0/20 subnet, so the directly connected route should be selected.

upvoted 0 times

Bernadine

2 months ago

Yes, the directly connected route is the most specific match for the destination IP address.

upvoted 0 times

...

Pilar

3 months ago

I agree, option D is the correct choice since the destination IP falls within that subnet.

upvoted 0 times

...