300-710 · Question #143
An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be…
The correct answer is C. in active/passive mode. If a network topology cannot support concurrent traffic from two high-availability devices, Cisco Firepower devices must be implemented in active/passive mode, where only one device is active at a time.
Question
An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be implemented in this environment?
Options
- Ain active/active mode
- Bin a cluster span EtherChannel
- Cin active/passive mode
- Din cluster interface mode
How the community answered
(22 responses)- A5% (1)
- B5% (1)
- C82% (18)
- D9% (2)
Why each option
If a network topology cannot support concurrent traffic from two high-availability devices, Cisco Firepower devices must be implemented in active/passive mode, where only one device is active at a time.
Active/active mode (clustering) requires both devices to concurrently pass traffic, which directly contradicts the problem statement that the network topology 'does not allow for two devices to pass traffic concurrently'.
EtherChannel is a link aggregation technology for redundancy and increased bandwidth, not a high availability mode that addresses the concurrent traffic limitation between two firewall devices.
Active/passive (failover) mode for Cisco Firepower ensures that only one device processes traffic at any given moment, with the other remaining as a standby. This implementation is ideal for network topologies that do not support or are not configured to handle concurrent traffic flows from multiple active firewall devices.
'Cluster interface mode' is not a standard high availability mode for Cisco Firepower; the common modes are active/active (clustering) and active/passive (failover).
Concept tested: Cisco Firepower High Availability modes
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-70/high_availability_for_firepower_threat_defense.html
Topics
Community Discussion
No community discussion yet for this question.