Exam 300-710 topic 1 question 27 discussion

According to the Cisco documentation, in routed firewall mode, bridge group traffic can indeed be routed to other bridge groups or routed interfaces. Therefore, the correct answer is: A. In routed firewall mode, routing between bridge groups is supported.

Actually, the correct answer is: **C. In routed firewall mode, routing between bridge groups must pass through a routed interface.** This characteristic ensures that even in routed firewall mode, bridge groups function in a way that traffic must pass through a routed interface for inter-group communication. If you have more questions or need further clarification, feel free to ask!

Answer is A. "Bridge group traffic can be routed to other bridge groups or routed interfaces." https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html#ID-2106-000000ae

Reference is about ASA. But the question is about FTD.

In routed mode, you can have one or more isolated bridge groups like in transparent mode, but also have normal routed interfaces as well for a mixed deployment. https://www.cisco.com/c/en/us/td/docs/security/asa/asa99/configuration/general/asa-99-general-config/intro-fw.html#ID-2106-0000000a

In routed mode: The BVI acts as the gateway between the bridge group and other routed interfaces. To route between bridge groups/routed interfaces, you must name the BVI. For some interface-based features, you can use the BVI itself. https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/configuration/general/asa-97-general-config/intro-fw.pdf

The correct rep. is B