300-710 · Question #157
A network security engineer must replace a faulty Cisco FTD device in a high availability pair. Which action must be taken while replacing the faulty unit?
The correct answer is D. Unregister the faulty Cisco FTD device from the Cisco FMC. When replacing a faulty Cisco FTD device in a high availability pair, it is crucial to unregister the faulty unit from the Cisco FMC before introducing the replacement. This cleans up the management configuration and prepares the FMC for the new device.
Question
A network security engineer must replace a faulty Cisco FTD device in a high availability pair. Which action must be taken while replacing the faulty unit?
Options
- AEnsure that the faulty Cisco FTD device remains registered to the Cisco FMC
- BShut down the active Cisco FTD device before powering up the replacement unit
- CShut down the Cisco FMC before powering up the replacement unit
- DUnregister the faulty Cisco FTD device from the Cisco FMC
How the community answered
(27 responses)- A4% (1)
- B15% (4)
- C4% (1)
- D78% (21)
Why each option
When replacing a faulty Cisco FTD device in a high availability pair, it is crucial to unregister the faulty unit from the Cisco FMC before introducing the replacement. This cleans up the management configuration and prepares the FMC for the new device.
Keeping a faulty FTD device registered to the FMC is incorrect, as it can cause management issues and prevent proper registration of a new replacement device.
Shutting down the active FTD device would cause a network outage, which is contrary to the purpose of a high availability pair during a planned replacement.
Shutting down the Cisco FMC is unnecessary for replacing an FTD device and would disrupt management of all other devices.
Before physically replacing a faulty Cisco FTD device in an HA pair, it must be unregistered or deleted from the Cisco FMC. This action logically removes the device from the management console, preventing conflicts and ensuring a clean slate for the replacement unit.
Concept tested: Cisco FTD HA device replacement procedure
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-70/device_high_availability_for_firepower_threat_defense.html#Cisco_Reference.dita_a7ef7517-5645-424a-9310-85f0a7c4923e
Topics
Community Discussion
No community discussion yet for this question.