nerdexam
Cisco

300-710 · Question #210

An engineer wants to add an additional Cisco FTD Version 6.2.3 device to their current 6.2.3 deployment to create a high availability pair. The currently deployed Cisco FTD device is using local…

The correct answer is A. Change from Cisco FDM management to Cisco FMC management on both devices and register. To create a high availability pair with an existing Cisco FTD managed locally (via FDM) and a new FTD, both devices must transition from Cisco FDM to Cisco FMC management and be registered with the FMC. This centralized management is a prerequisite for FTD HA pairing.

Deployment

Question

An engineer wants to add an additional Cisco FTD Version 6.2.3 device to their current 6.2.3 deployment to create a high availability pair. The currently deployed Cisco FTD device is using local management and identical hardware including the available port density to enable the failover and stateful links required in a proper high availability deployment. Which action ensures that the environment is ready to pair the new Cisco FTD with the old one?

Options

  • AChange from Cisco FDM management to Cisco FMC management on both devices and register
  • BEnsure that the two devices are assigned IP addresses from the 169 254.0.0/16 range for failover
  • CFactory reset the current Cisco FTD so that it can synchronize configurations with the new Cisco
  • DEnsure that the configured DNS servers match on the two devices for name resolution.

How the community answered

(61 responses)
  • A
    82% (50)
  • B
    3% (2)
  • C
    5% (3)
  • D
    10% (6)

Why each option

To create a high availability pair with an existing Cisco FTD managed locally (via FDM) and a new FTD, both devices must transition from Cisco FDM to Cisco FMC management and be registered with the FMC. This centralized management is a prerequisite for FTD HA pairing.

AChange from Cisco FDM management to Cisco FMC management on both devices and registerCorrect

Cisco FTD high availability (HA) pairs cannot be managed locally via Firepower Device Manager (FDM); they require centralized management by a Cisco Firepower Management Center (FMC). Therefore, before forming an HA pair, both the existing and the new FTD devices must be switched from FDM management to FMC management and then registered with the FMC, which will then manage the HA configuration.

BEnsure that the two devices are assigned IP addresses from the 169 254.0.0/16 range for failover

While failover interfaces do use dedicated IP addresses for communication, they typically do not explicitly require the 169.254.0.0/16 range, and the primary prerequisite for HA is FMC management.

CFactory reset the current Cisco FTD so that it can synchronize configurations with the new Cisco

Factory resetting the current FTD would erase its configuration, which is unnecessary and undesirable; the FMC manages configuration synchronization for the HA pair after they are registered.

DEnsure that the configured DNS servers match on the two devices for name resolution.

Matching DNS servers is good practice for network devices but is not a specific prerequisite for establishing a Cisco FTD high availability pair, which fundamentally relies on shared FMC management.

Concept tested: Cisco FTD high availability management requirements

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-623/device_high_availability.html#concept_f4k_5c4_4z

Topics

#Cisco FTD#High Availability (HA)#FMC Management#FDM Limitations

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-710 Practice