300-710 · Question #236
Which two descriptions of a Cisco Firepower NGIPS deployment that uses an Inline Pair interface in tap mode are true? (Choose two )
The correct answer is C. Transit traffic can be dropped E. Two physical interfaces are bridged internally.. When deploying Cisco Firepower NGIPS with an Inline Pair interface, two physical interfaces are internally bridged, making it capable of dropping transit traffic when configured in inline mode. Even if currently in tap mode, the inherent capability of the inline pair allows for b
Question
Which two descriptions of a Cisco Firepower NGIPS deployment that uses an Inline Pair interface in tap mode are true? (Choose two )
Options
- AAll the Cisco ASA engine features are available
- BWore than two interfaces can be bridged.
- CTransit traffic can be dropped
- DThe deployment is available in transparent mode only.
- ETwo physical interfaces are bridged internally.
How the community answered
(58 responses)- A3% (2)
- B5% (3)
- C78% (45)
- D14% (8)
Why each option
When deploying Cisco Firepower NGIPS with an Inline Pair interface, two physical interfaces are internally bridged, making it capable of dropping transit traffic when configured in inline mode. Even if currently in tap mode, the inherent capability of the inline pair allows for blocking when fully inline.
All Cisco ASA engine features are available only if FirePOWER Services are integrated with an ASA, not directly with a standalone NGIPS appliance using an Inline Pair interface.
An Inline Pair typically refers to bridging two interfaces for a single segment; bridging more than two interfaces is characteristic of inline sets or other complex bridge group configurations, not a standard Inline Pair.
An Inline Pair interface, when deployed in full inline mode (not tap mode), has the capability to actively inspect and drop transit traffic based on policy decisions.
While an Inline Pair can operate in transparent mode, it is not limited to transparent mode only; it can also function as a routed interface or in inline tap mode.
An Inline Pair interface inherently consists of two physical interfaces that are logically bridged internally, allowing the Firepower device to sit directly in the traffic path.
Concept tested: Cisco Firepower NGIPS inline deployment
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Interfaces_Overview.html
Topics
Community Discussion
No community discussion yet for this question.