300-710 · Question #102
A mid-sized company is experiencing higher network bandwidth utilization due to a recent acquisition. The network operations team is asked to scale up their one Cisco FTD appliance deployment to…
The correct answer is A. Deploy multiple Cisco FTD appliances in firewall clustering mode to increase performance. When the goal is to increase throughput and performance (scale up capacity), Cisco FTD clustering is the correct solution. Clustering combines multiple FTD units into a single logical device, allowing traffic load to be distributed across all cluster members, effectively…
Question
A mid-sized company is experiencing higher network bandwidth utilization due to a recent acquisition. The network operations team is asked to scale up their one Cisco FTD appliance deployment to higher capacities due to the increased network bandwidth. Which design option should be used to accomplish this goal?
Options
- ADeploy multiple Cisco FTD appliances in firewall clustering mode to increase performance.
- BDeploy multiple Cisco FTD appliances using VPN load-balancing to scale performance.
- CDeploy multiple Cisco FTD HA pairs to increase performance
- DDeploy multiple Cisco FTD HA pairs in clustering mode to increase performance
How the community answered
(20 responses)- A85% (17)
- C10% (2)
- D5% (1)
Explanation
When the goal is to increase throughput and performance (scale up capacity), Cisco FTD clustering is the correct solution. Clustering combines multiple FTD units into a single logical device, allowing traffic load to be distributed across all cluster members, effectively multiplying throughput capacity. Option B (VPN load balancing) only distributes VPN session load and does not scale general firewall throughput. Option C (multiple HA pairs) provides redundancy and failover but does not increase performance - in an HA pair, only the active unit processes traffic. Option D is not a valid Cisco FTD design; HA pairs cannot themselves be clustered together as described.
Topics
Community Discussion
No community discussion yet for this question.