300-710 · Question #183
A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch. Which firewall mode is the Cisco FTD set up to support?
The correct answer is C. routed. When two physical interfaces on a Cisco FTD are assigned to a Bridge Virtual Interface (BVI), and each interface connects to a different VLAN on the same switch, the firewall is configured to operate in routed mode.
Question
A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch. Which firewall mode is the Cisco FTD set up to support?
Options
- Aactive/active failover
- Btransparent
- Crouted
- Dhigh availability clustering
How the community answered
(54 responses)- A17% (9)
- B9% (5)
- C70% (38)
- D4% (2)
Why each option
When two physical interfaces on a Cisco FTD are assigned to a Bridge Virtual Interface (BVI), and each interface connects to a different VLAN on the same switch, the firewall is configured to operate in routed mode.
Active/active failover is a high availability configuration for redundancy, not a primary firewall operating mode like routed or transparent.
In transparent mode, the FTD acts as a Layer 2 bridge; while BVIs are used, if the FTD is intended to handle traffic between different VLANs as a Layer 3 device (routing), it implies routed mode with the BVI providing L3 termination.
When a Cisco FTD has two physical interfaces assigned to a Bridge Virtual Interface (BVI), and each interface connects to a different VLAN, the FTD is configured for routed mode. In this setup, the BVI acts as a Layer 3 interface for the bridge group, allowing the FTD to route traffic between the different VLANs while performing security inspection.
High availability clustering is a feature for redundancy and scaling, not a primary firewall operating mode.
Concept tested: Cisco FTD firewall modes and BVI usage
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-70/interface_basics.html
Topics
Community Discussion
No community discussion yet for this question.