Question 1
What is a result of enabling Cisco FTD clustering?
- For the dynamic routing feature, if the master unit fails, the newly elected master unit maintains all existing connections.
- Integrated Routing and Bridging is supported on the master unit.
- Site-to-site VPN functionality is limited to the master unit, and all VPN connections are dropped if the master unit fails.
- All Firepower appliances support Cisco FTD clustering.
Question 2
Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)
- The units must be the same version
- Both devices can be part of a different group that must be in the same domain when configured within the FMC.
- The units must be different models if they are part of the same series.
- The units must be configured only for firewall routed mode.
- The units must be the same model.
Question 3
On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?
- transparent inline mode
- TAP mode
- strict TCP enforcement
- propagate link state
Question 4
What are the minimum requirements to deploy a managed device inline?
- inline interfaces, security zones, MTU, and mode
- passive interface, MTU, and mode
- inline interfaces, MTU, and mode
- passive interface, security zone, MTU, and mode
Question 5
What is the difference between inline and inline tap on Cisco Firepower?
- Inline tap mode can send a copy of the traffic to another device.
- Inline tap mode does full packet capture.
- Inline mode cannot do SSL decryption.
- Inline mode can drop malicious traffic.