An engineer must replace a Cisco Secure Firewall high-availability device due to a failure. When the replacement device arrives, the engineer must separate the high-availability pair from Cisco…

The correct answer is C. Unregister the secondary device. When replacing a failed device in a Cisco Secure Firewall high-availability (HA) pair, the first action is to unregister the failed secondary device from Cisco Secure Firewall Management Center. This cleanly breaks the HA pair association in FMC, freeing the primary device to…

Management and Troubleshooting

Question

An engineer must replace a Cisco Secure Firewall high-availability device due to a failure. When the replacement device arrives, the engineer must separate the high-availability pair from Cisco Secure Firewall Management Center. Which action must the engineer take first to restore high availability?

Options

ARegister the secondary device
BForce a break between the devices.
CUnregister the secondary device.
DConfigure NTP time synchronization.

How the community answered

(52 responses)

A
4% (2)
B
17% (9)
C
71% (37)
D
8% (4)

Explanation

When replacing a failed device in a Cisco Secure Firewall high-availability (HA) pair, the first action is to unregister the failed secondary device from Cisco Secure Firewall Management Center. This cleanly breaks the HA pair association in FMC, freeing the primary device to operate independently and allowing a new secondary device to be registered. Attempting to register the replacement device before unregistering the failed one would cause conflicts. Breaking HA at the device level (Option B) or configuring NTP (Option D) are subsequent steps; unregistering the old secondary is the required first action.

Topics

#Cisco Secure Firewall#High Availability (HA)#FMC Management#Device Replacement

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice