Drag and Drop Question Drag and drop the deployment models from the left onto the explanations on the right. Answer:

The correct answer is routed; passive; passive with ERSPAN; transparent. The correct arrangement maps each deployment model to its defining characteristic: 'routed' mode places the IPS inline as a Layer 3 hop that actively forwards and can block traffic; 'passive' mode monitors a copy of traffic (via SPAN/tap) without being in the traffic path; 'passi

Submitted by brentm· Mar 30, 2026Cisco CCNP Security / CyberOps - Implementing and Operating Cisco Security Core Technologies (SCOR): Describe and differentiate IDS/IPS deployment models including routed, passive, passive with ERSPAN, and transparent modes

Question

Drag and Drop Question Drag and drop the deployment models from the left onto the explanations on the right. Answer:

Exhibit

Answer Area

Drag items

routedpassivepassive with ERSPANtransparent

Correct arrangement

routed
passive
passive with ERSPAN
transparent

Explanation

The correct arrangement maps each deployment model to its defining characteristic: 'routed' mode places the IPS inline as a Layer 3 hop that actively forwards and can block traffic; 'passive' mode monitors a copy of traffic (via SPAN/tap) without being in the traffic path; 'passive with ERSPAN' extends passive monitoring across routed network boundaries using encapsulated remote SPAN; and 'transparent' (inline tap/bridge) mode places the sensor inline at Layer 2 without an IP address, allowing it to inspect and block traffic while appearing invisible to the network. Each model represents a distinct balance between visibility, active enforcement capability, and network impact.

Topics

#IPS Deployment Modes#Network Security Architecture#Cisco Firepower#Inline vs Passive Monitoring

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice