A customer wants to implement FirePOWER services with AVC and IPS on its Cisco ASA 5515- X. This device is currently deployed with a legacy IPS module. Which three steps may be required to upgrade? (C

Question

Options

• ADiscuss a Cisco ASA upgrade to maintain performance
• BPurchase a subscription license for IPS.
• CRemove the SSD drive.
• DPurchase a subscription license for AVC and IPS.
• ERemove the legacy IPS module
• FPurchase the SFR hardware module

• A
  70% (19)
• B
  19% (5)
• C
  4% (1)
• F
  7% (2)

Explanation

Upgrading to FirePOWER services on the ASA 5515-X requires removing the legacy IPS module (E) because the platform has a single expansion slot - the old module must go before FirePOWER can be deployed. FirePOWER's AVC and IPS capabilities are subscription-based, so purchasing the combined license (D) is mandatory; you cannot activate them without it. Because FirePOWER with AVC and IPS together is significantly more resource-intensive than a legacy IPS module, discussing an ASA platform upgrade (A) to sustain throughput and performance is a necessary planning step.

Why the distractors are wrong:

• B is wrong because you don't buy IPS as a standalone subscription - AVC and IPS are licensed together as a bundle (making D the correct option).
• C is wrong because removing an SSD is not part of this upgrade path; the legacy AIP-SSM module does not contain an SSD that must be extracted.
• F is wrong because FirePOWER services on the 5515-X are deployed as a software module - no separate SFR hardware purchase is required.

Memory tip: Remember "A-D-E = Assess, Deal (license), Eject" - Assess performance impact, Deal with licensing (AVC+IPS subscription), and Eject the old module. The SFR is software on the 5500-X series, so hardware purchase (F) is a trap answer.

No community discussion yet for this question.