Implement Secure Firewall modes

7 practice questions under this official exam objective (300-710) — each with the community-verified answer, a full option-by-option explanation and instant feedback.

300-710 A-grade

Why Is a Transparent FTD Not Processing ERSPAN Traffic?

A transparent Cisco FTD cannot terminate ERSPAN traffic because Cisco supports ERSPAN interfaces only in routed firewall mode. This page confirms the

11 comments
300-710 A-grade

How Does FTD Inspect Same-Subnet and Internet Traffic?

Cisco FTD can only inspect traffic that stays inside one subnet by bridging it through a bridge group BVI, while Internet-bound traffic must be routed

9 comments
300-710 S-grade

How Do You Isolate BVI Traffic on a Routed FTD?

On a routed FTD, a BVI acts as the routed interface for a bridge group, so its traffic can still be leaked into the global routing table. Isolating th

5 comments
300-710 A-grade

What Must Be Configured on e1/6 for an FTD IPS Inline Pair?

Building an IPS inline pair on Cisco Secure Firewall Threat Defense requires a specific set of interface and inline-set values in Firewall Management

3 comments
300-710 A-grade

What is the Firewall Mode with a Named BVI?

In Cisco Secure Firewall Threat Defense, assigning physical interfaces to a named Bridge Virtual Interface (BVI) indicates the device is operating in

3 comments
300-710 A-grade

Which FTD Mode Survives Any Failure at the Perimeter?

Cisco Secure Firewall Threat Defense hardware bypass keeps an inline interface pair passing traffic during power, software, or hardware failure. This

3 comments
300-710 A-grade

How Do You Configure a BVI for FTD Transparent Mode in FMC?

For a Cisco Secure Firewall Threat Defense device in transparent mode, the bridge virtual interface (BVI) and its member interfaces must each be given

1 comment