300-710 · Question #231
Which description of a passive interface on a Cisco Firepower NGFW is true?
The correct answer is A. Receives traffic that is specified on an NGIPS. A passive interface on a Cisco Firepower NGFW is primarily used to receive mirrored traffic for inspection by the Next-Generation Intrusion Prevention System (NGIPS).
Question
Which description of a passive interface on a Cisco Firepower NGFW is true?
Options
- AReceives traffic that is specified on an NGIPS
- BInaccessible when disable
- CEffected by firewall mode
- DRetransmits received traffic
How the community answered
(24 responses)- A96% (23)
- C4% (1)
Why each option
A passive interface on a Cisco Firepower NGFW is primarily used to receive mirrored traffic for inspection by the Next-Generation Intrusion Prevention System (NGIPS).
A passive interface on a Cisco Firepower NGFW is configured for out-of-band monitoring to receive copies of network traffic, typically from a SPAN port, for analysis. This traffic is then processed by the NGIPS engine to detect intrusion events and other threats based on defined policies without impacting the traffic flow.
An interface that is disabled would be inaccessible regardless of its mode, and this is not a unique characteristic or primary function of a passive interface.
Passive mode is itself an interface configuration mode; it is not 'effected by' other firewall modes like routed or transparent, but rather defines its own operational behavior for monitoring.
Passive interfaces are strictly for monitoring (listening to) traffic; they do not retransmit received traffic back into the network.
Concept tested: Cisco Firepower NGFW passive interface function
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/7x/configuration/guide/fpmc-config-guide-70/interface_configuration.html
Topics
Community Discussion
No community discussion yet for this question.