Exam 300-710 topic 1 question 323 discussion

Actual exam question from Cisco's 300-710

Question #: 323
Topic #: 1

Refer to the exhibit. A company is deploying a pair of Cisco Secure Firewall Threat Defense devices named FTD1 and FTD2. FTD1 and FTD2 have been configured as an active/standby pair with a failover link but without a stateful link. What must be implemented next to ensure that users on the internal network still communicate with outside devices if FTD1 fails?

A. Disable port security on the switch interfaces connected to FTD1 and FTD2.
B. Connect and configure a stateful link and then deploy the changes.
C. Configure the spanning-tree PortFast feature on SW1 and FTD2.
D. Set maximum secured addresses to two on the switch interfaces on FTD1 and FTD2.

Show Suggested Answer

Suggested Answer: A 🗳️

by tinyJoe at Jan. 4, 2025, 10:28 a.m.

Comments

Submit Cancel

tinyJoe

1 week, 6 days ago

Selected Answer: A

When the HA in FTD fails over, the new active machine takes over the IP address and MAC address from the previous active machine. From the L2 switch's point of view, the MAC addresses connected to Gi0/2 and Gi0/12 will suddenly change, and Portsecurity will shutdown the ports. So either A or D is correct, but D says “interfaces on FTD”, so the correct answer is A.

upvoted 2 times

...

Exam 300-710 All Questions

View all questions & answers for the 300-710 exam

Exam 300-710 topic 1 question 323 discussion

Comments

tinyJoe

SY0-701