nerdexam
Cisco

300-710 · Question #231

Which description of a passive interface on a Cisco Firepower NGFW is true?

The correct answer is A. Receives traffic that is specified on an NGIPS. A passive interface on a Cisco Firepower NGFW is primarily used to receive mirrored traffic for inspection by the Next-Generation Intrusion Prevention System (NGIPS).

Deployment

Question

Which description of a passive interface on a Cisco Firepower NGFW is true?

Options

  • AReceives traffic that is specified on an NGIPS
  • BInaccessible when disable
  • CEffected by firewall mode
  • DRetransmits received traffic

How the community answered

(24 responses)
  • A
    96% (23)
  • C
    4% (1)

Why each option

A passive interface on a Cisco Firepower NGFW is primarily used to receive mirrored traffic for inspection by the Next-Generation Intrusion Prevention System (NGIPS).

AReceives traffic that is specified on an NGIPSCorrect

A passive interface on a Cisco Firepower NGFW is configured for out-of-band monitoring to receive copies of network traffic, typically from a SPAN port, for analysis. This traffic is then processed by the NGIPS engine to detect intrusion events and other threats based on defined policies without impacting the traffic flow.

BInaccessible when disable

An interface that is disabled would be inaccessible regardless of its mode, and this is not a unique characteristic or primary function of a passive interface.

CEffected by firewall mode

Passive mode is itself an interface configuration mode; it is not 'effected by' other firewall modes like routed or transparent, but rather defines its own operational behavior for monitoring.

DRetransmits received traffic

Passive interfaces are strictly for monitoring (listening to) traffic; they do not retransmit received traffic back into the network.

Concept tested: Cisco Firepower NGFW passive interface function

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/7x/configuration/guide/fpmc-config-guide-70/interface_configuration.html

Topics

#Passive Interface#Firepower NGFW#NGIPS#Traffic Monitoring

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice