nerdexam
Cisco

350-701 · Question #203

What is a characteristic of a bridge group in ASA Firewall transparent mode?

The correct answer is C. It includes multiple interfaces and access rules between interfaces are customizable. In ASA Firewall transparent mode, a bridge group logically combines multiple interfaces, and specific access rules can be configured to control traffic flow between these interfaces.

Submitted by jaden.t· Mar 30, 2026Network Security

Question

What is a characteristic of a bridge group in ASA Firewall transparent mode?

Exhibit

350-701 question #203 exhibit

Options

  • AIt allows ARP traffic with a single access rule.
  • BIt is a Layer 3 segment and includes one port and customizable access rules.
  • CIt includes multiple interfaces and access rules between interfaces are customizable
  • DIt has an IP address on its BVI interface and is used for management traffic.

How the community answered

(32 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    88% (28)
  • D
    3% (1)

Why each option

In ASA Firewall transparent mode, a bridge group logically combines multiple interfaces, and specific access rules can be configured to control traffic flow between these interfaces.

AIt allows ARP traffic with a single access rule.

While a transparent firewall generally allows ARP traffic by default, it does not require a single access rule for this, and this is not the primary characteristic of a bridge group itself.

BIt is a Layer 3 segment and includes one port and customizable access rules.

A bridge group in transparent mode operates at Layer 2, not Layer 3, and is designed to include multiple interfaces, not just one.

CIt includes multiple interfaces and access rules between interfaces are customizableCorrect

In transparent firewall mode, the ASA acts as a Layer 2 device, bridging traffic between two or more network segments. A bridge group allows you to group multiple interfaces, and you can define access rules to permit or deny traffic between these specific member interfaces, offering granular control over traffic flow within the bridge group.

DIt has an IP address on its BVI interface and is used for management traffic.

While a Bridge-Group Virtual Interface (BVI) does have an IP address and can be used for management, this describes the BVI's function, not the defining characteristic of the bridge group's capability to group interfaces and apply rules between them.

Concept tested: ASA Transparent Firewall Bridge Groups

Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/fw_transparent.html#pgfId-1002951

Topics

#ASA transparent mode#bridge group#Layer 2 firewall#firewall configuration

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice