nerdexam
Cisco

300-710 · Question #103

An organization has seen a lot of traffic congestion on their links going out to the internet There is a Cisco Firepower device that processes all of the traffic going to the internet prior to…

The correct answer is D. Create a QoS policy rate-limiting high bandwidth applications. To alleviate internet link congestion and prioritize legitimate business traffic, a QoS policy should be implemented on the Cisco Firepower device to rate-limit high bandwidth applications.

Configuration

Question

An organization has seen a lot of traffic congestion on their links going out to the internet There is a Cisco Firepower device that processes all of the traffic going to the internet prior to leaving the enterprise. How is the congestion alleviated so that legitimate business traffic reaches the destination?

Options

  • ACreate a flexconfig policy to use WCCP for application aware bandwidth limiting
  • BCreate a VPN policy so that direct tunnels are established to the business applications
  • CCreate a NAT policy so that the Cisco Firepower device does not have to translate as many
  • DCreate a QoS policy rate-limiting high bandwidth applications

How the community answered

(16 responses)
  • B
    6% (1)
  • C
    13% (2)
  • D
    81% (13)

Why each option

To alleviate internet link congestion and prioritize legitimate business traffic, a QoS policy should be implemented on the Cisco Firepower device to rate-limit high bandwidth applications.

ACreate a flexconfig policy to use WCCP for application aware bandwidth limiting

WCCP (Web Cache Communication Protocol) is for directing traffic to web caches and not primarily for bandwidth limiting or congestion alleviation directly on the Firepower device in this context. FlexConfig is for custom CLI commands, but not the core mechanism for this.

BCreate a VPN policy so that direct tunnels are established to the business applications

Creating a VPN policy establishes secure tunnels, which doesn't directly alleviate general internet link congestion; it might even add overhead.

CCreate a NAT policy so that the Cisco Firepower device does not have to translate as many

A NAT policy translates IP addresses and has no direct impact on reducing traffic volume or prioritizing specific applications to alleviate congestion.

DCreate a QoS policy rate-limiting high bandwidth applicationsCorrect

A Quality of Service (QoS) policy allows administrators to prioritize critical business applications and de-prioritize or rate-limit less critical, high-bandwidth applications (like streaming or file sharing). By applying this policy on the Firepower device, legitimate business traffic is guaranteed the necessary bandwidth, alleviating congestion.

Concept tested: Cisco Firepower QoS for bandwidth management

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/qos-policies.html

Topics

#QoS#Bandwidth Management#Traffic Prioritization#Cisco Firepower

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice