nerdexam
Cisco

300-710 · Question #143

An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be…

The correct answer is C. in active/passive mode. If a network topology cannot support concurrent traffic from two high-availability devices, Cisco Firepower devices must be implemented in active/passive mode, where only one device is active at a time.

Deployment

Question

An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be implemented in this environment?

Options

  • Ain active/active mode
  • Bin a cluster span EtherChannel
  • Cin active/passive mode
  • Din cluster interface mode

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    82% (18)
  • D
    9% (2)

Why each option

If a network topology cannot support concurrent traffic from two high-availability devices, Cisco Firepower devices must be implemented in active/passive mode, where only one device is active at a time.

Ain active/active mode

Active/active mode (clustering) requires both devices to concurrently pass traffic, which directly contradicts the problem statement that the network topology 'does not allow for two devices to pass traffic concurrently'.

Bin a cluster span EtherChannel

EtherChannel is a link aggregation technology for redundancy and increased bandwidth, not a high availability mode that addresses the concurrent traffic limitation between two firewall devices.

Cin active/passive modeCorrect

Active/passive (failover) mode for Cisco Firepower ensures that only one device processes traffic at any given moment, with the other remaining as a standby. This implementation is ideal for network topologies that do not support or are not configured to handle concurrent traffic flows from multiple active firewall devices.

Din cluster interface mode

'Cluster interface mode' is not a standard high availability mode for Cisco Firepower; the common modes are active/active (clustering) and active/passive (failover).

Concept tested: Cisco Firepower High Availability modes

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-70/high_availability_for_firepower_threat_defense.html

Topics

#High Availability#Active/Passive#Cisco Firepower#Network Topology

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice