Exam 300-710 topic 1 question 4 discussion

C, as a security zone ON the interface is not required to add to an inline pair. The GUI will tell you when you add the interfaces as a pair that it will remove any existing zone.

I choose A. As long as the documentation says the security zone setting is a “must”, I don't want to choose C. https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/760/management-center-device-config-76/interfaces-settings-ifcs-ips.html#:~:text=Do%20not%20set%20the%20security%20zone%20yet;%20you%20must%20set%20it%20after%20you%20create%20the%20inline%20set%20later%20in%20this%20procedure

(optional for security zone) If you want to associate the inline interface with a security zone, do one of the following: Choose an existing security zone from the Security Zone drop-down list. Choose New to add a new security zone; see Creating Security Zone and Interface Group Objects.

Correct is C

"minimum requirements" The answer is C: Inline interface, MTU and Mode Security zone is optional

A is correct The minimum set of requirements to deploy a device inline is to set the interfaces to inline, set the security zone, verify the MTU and set the mode (to none, which makes it inline).

C, makes more sense here

You explicitly must fill up MTU and Inline pairs. Mode is changing then you switch to Inline pair automatically. It is not configuration but is changes when you config Inline.

The security zone also must configuration when deploying the devices inline. https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/ips_device_deployments_and_configuration.html#ID-2238-0000008b "Create inline sets before you add security zones for the interfaces in the inline set; otherwise security zones are removed and you must add them again."