An organization is implementing Cisco FTD using transparent mode in the network. Which rule in the default Access Control Policy ensures that this deployment does not create a loop in the network?

Question

Options

• AARP inspection is enabled by default.
• BMulticast and broadcast packets are denied by default.
• CSTP BPDU packets are allowed by default.
• DARP packets are allowed by default.

• B
  5% (2)
• C
  93% (37)
• D
  3% (1)

Explanation

In transparent mode, Cisco FTD acts as a Layer 2 bridge inline in the network. To prevent Layer 2 loops, Spanning Tree Protocol (STP) must be allowed to operate. STP relies on Bridge Protocol Data Units (BPDUs) to elect a root bridge and block redundant paths. By default, Cisco FTD in transparent mode allows STP BPDUs to pass through, enabling STP to function across the bridged segment and prevent loops. Option A (ARP inspection) is a security feature, not a loop-prevention mechanism. Option B is incorrect - blocking multicast and broadcast would break normal network operations. Option D (allowing ARP) is necessary for Layer 2 operation but does not prevent loops.

No community discussion yet for this question.