exam questions

Exam 300-710 All Questions

View all questions & answers for the 300-710 exam

Exam 300-710 topic 1 question 138 discussion

Actual exam question from Cisco's 300-710
Question #: 138
Topic #: 1
[All 300-710 Questions]

Within an organization’s high availability environment where both firewalls are passing traffic, traffic must be segmented based on which department it is destined for. Each department is situated on a different LAN. What must be configured to meet these requirements?

  • A. redundant interfaces
  • B. span EtherChannel clustering
  • C. high availability active/standby firewalls
  • D. multi-instance firewalls
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
tinyJoe
4 days, 5 hours ago
Selected Answer: D
This is a very unclear question, but I guess it would be D. I assume that the author's intended configuration is similar to the “Network Diagram” in the following document: https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-management-center-virtual/221625-configure-ftd-multi-instance-high-availa.html#toc-hId--1943291811 We will configure an HA with two FTDs, each with two instances. Then, for instance A, Unit 1 is Active - Unit 2 is Passive, and for instance B, Unit 1 is Passive - Unit 2 is Active. In this way, even with Active/Passive HA, the “both firewalls are passing traffic” requirement of the question can be satisfied.
upvoted 1 times
...
gwb
4 months, 1 week ago
segmentation means separation. Redundant interface is backup, not separation. EtherChannel is to bump up throughput and redundant path. HA active/standby - does NOT allow both firewalls passing traffic
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago