A retired partner prefix must not leave the compost-lab subnet at all, even toward the hub firewall. Which user-defined route next hop should the security engineer configure for that prefix?
Select an answer to reveal the explanation.
Short Explanation
That old partner prefix shouldn’t hitch a ride anywhere—not even to the firewall. UDR it with next hop None and let the packets fall into the bit bucket.
Full Explanation
A user-defined route with next hop None blackholes matching traffic: packets are dropped instead of being sent to a firewall, gateway, or the Internet. That is the correct control when a retired partner prefix must not leave the subnet at all. Virtual appliance would still forward toward an NVA. Internet and VNet gateway next hops intentionally forward traffic rather than discard it.