Watchguard Network Security Practice Test

What static route must be added to the Firebox for traffic from clients on the trusted network to reach a server at 10.0.20.100?

1. Route to 10.0.20.0/24, Gateway 10.0.2.1

2. Route to 10.0.20.0/24, Gateway 10.0.2.254

3. Route to 10.0.20.0, Gateway 10.0.2.254

4. Route to 10.0.10.0/24, Gateway 10.0.10.1

The correct answer is: Route to 10.0.20.0/24, Gateway 10.0.2.254

To enable clients on the trusted network to communicate with the server located at the IP address 10.0.20.100, a static route must be established that points to the correct network segment where the server resides. The server's IP address indicates that it belongs to the 10.0.20.0/24 network range, which means the subnet mask is 255.255.255.0 and covers all IP addresses from 10.0.20.1 to 10.0.20.254, with 10.0.20.0 as the network address. The correct answer specifies a route to the 10.0.20.0/24 network with a gateway of 10.0.2.254. This choice is appropriate if 10.0.2.254 is an IP address on the Firebox or another device that can reach the 10.0.20.0 network. A gateway serves as a forwarding device used by the Firebox to send traffic that is destined for the specified network. Therefore, when clients on the trusted network need to establish a connection to the server at 10.0.20.100, the Firebox will forward this traffic to the gateway specified