nerdexam
Cisco

300-710 · Question #183

A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch. Which firewall mode is the Cisco FTD set up to support?

The correct answer is C. routed. When two physical interfaces on a Cisco FTD are assigned to a Bridge Virtual Interface (BVI), and each interface connects to a different VLAN on the same switch, the firewall is configured to operate in routed mode.

Deployment

Question

A Cisco FTD has two physical interfaces assigned to a BVI. Each interface is connected to a different VLAN on the same switch. Which firewall mode is the Cisco FTD set up to support?

Options

  • Aactive/active failover
  • Btransparent
  • Crouted
  • Dhigh availability clustering

How the community answered

(54 responses)
  • A
    17% (9)
  • B
    9% (5)
  • C
    70% (38)
  • D
    4% (2)

Why each option

When two physical interfaces on a Cisco FTD are assigned to a Bridge Virtual Interface (BVI), and each interface connects to a different VLAN on the same switch, the firewall is configured to operate in routed mode.

Aactive/active failover

Active/active failover is a high availability configuration for redundancy, not a primary firewall operating mode like routed or transparent.

Btransparent

In transparent mode, the FTD acts as a Layer 2 bridge; while BVIs are used, if the FTD is intended to handle traffic between different VLANs as a Layer 3 device (routing), it implies routed mode with the BVI providing L3 termination.

CroutedCorrect

When a Cisco FTD has two physical interfaces assigned to a Bridge Virtual Interface (BVI), and each interface connects to a different VLAN, the FTD is configured for routed mode. In this setup, the BVI acts as a Layer 3 interface for the bridge group, allowing the FTD to route traffic between the different VLANs while performing security inspection.

Dhigh availability clustering

High availability clustering is a feature for redundancy and scaling, not a primary firewall operating mode.

Concept tested: Cisco FTD firewall modes and BVI usage

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-70/interface_basics.html

Topics

#Cisco FTD#Firewall Modes#BVI#Interface Configuration

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice