What is your best technical interview question for a network analyst?

I have a supplemental test to give interviewees and need to guage their network knowledge in layer 3, firewall and VPN.