An engineer is configuring multiple Cisco FTD appliances (or use in the network. Which rule must the engineer follow while defining interface objects in Cisco FMC for use with interfaces across…

The correct answer is C. Interface groups can contain interfaces from many devices. In Cisco FMC, interface groups differ from security zones in an important way: interface groups can contain interfaces from multiple FTD devices, which makes them suitable for deploying policies across a multi-device environment. Option A is incorrect - while an interface can…

Configuration

Question

An engineer is configuring multiple Cisco FTD appliances (or use in the network. Which rule must the engineer follow while defining interface objects in Cisco FMC for use with interfaces across multiple devices?

Options

AAn interface cannot belong to a security zone and an interface group
BInterface groups can contain multiple interface types
CInterface groups can contain interfaces from many devices.
DTwo security zones can contain the same interface

How the community answered

(37 responses)

A
3% (1)
C
92% (34)
D
5% (2)

Explanation

In Cisco FMC, interface groups differ from security zones in an important way: interface groups can contain interfaces from multiple FTD devices, which makes them suitable for deploying policies across a multi-device environment. Option A is incorrect - while an interface can belong to only one zone or one group (not both simultaneously), this is a restriction, not the defining rule about multi-device use. Option B is incorrect because interface groups, unlike security zones, must contain interfaces of the same type. Option D is false - a single interface cannot belong to two security zones simultaneously.

Topics

#Cisco FMC#FTD Interface Configuration#Interface Groups#Multi-device Management

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice