On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?
On the advanced tab under inline set properties, which allows interfaces to emulate a passive interface?
TAP mode allows interfaces to emulate a passive interface by enabling the inline device to monitor the traffic without actually intercepting or altering the traffic flow. This is useful for network monitoring and analysis, as the traffic remains unaffected. Propagate link state, on the other hand, manages the link state of paired interfaces and does not enable passive monitoring of traffic. Therefore, the correct answer is TAP mode.
Tap Mode is the right anwer Link state propagation automatically brings down the second interface in the inline interface pair when one of the interfaces in an inline set goes down https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html With tap mode, the FTD is deployed inline, but the network traffic flow is undisturbed. https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/interface_overview_for_firepower_threat_defense.html#concept_DB45E8BBB07946728427FF98DB2DC56D
I agree with scanossa, TAP mode should be the correct answer. Propagate link state has nothing to do with passive or active. Link state propagation automatically brings down the second interface in the inline interface pair when one of the interfaces in an inline set goes down. When the downed interface comes back up, the second interface automatically comes back up.
yes you are right ,thw answer should be tap mode.
Its highlighted D as correct answer when should be B.
The key phrase here is" interfaces to emulate a passive interface" so Tap mode the correct answer
TAP mode indeed.
The "TAP mode" option under the "Inline Set" properties on the Advanced tab of a Cisco FTD interface configuration also allows the interface to emulate a passive interface. In TAP mode, the interface is configured to passively monitor traffic by copying it to another interface, without actually forwarding or blocking any packets. This is useful for network monitoring or troubleshooting purposes, and can be combined with features like packet capture or intrusion detection.
Dear Examtopics editor, when you don't change the answer on these obvious questions it makes us doubt all your answers. Do change it to Tap mode.
I guess, but it's the questions that are key, we can work out the answers if need be, and learn something in the process....if all the answers were guaranteed spot on it really would just be a question of memory recall.
Answer is B
Correct answer is: B. TAP mode
Correct answer is: B. TAP mode
Click Advanced to set the following optional parameters: CORRECT ANSWER (B) Tap Mode — Set to inline tap mode. INCORRECT ANSWER Propagate Link State: Link state propagation automatically brings down the second interface in the inline interface pair when one of the interfaces in an inline set goes down. When the downed interface comes back up, the second interface automatically comes back up, also. In other words, if the link state of one interface changes, the device senses the change and updates the link state of the other interface to match it. Note that devices require up to 4 seconds to propagate link state changes. Link state propagation is especially useful in resilient network environments where routers are configured to reroute traffic automatically around network devices that are in a failure state.
Tap mode is the correct answer
B are rite answer
what is benefit of TAP mode of inline set? There are benefits to using tap mode with FTDs that are deployed inline. For example, you can set up the cabling between the FTD and the network as if the FTD were inline and analyze the kinds of intrusion events the FTD generates. Based on the results, you can modify your intrusion policy and add the drop rules that best protect your network without impacting its efficiency. When you are ready to deploy the FTD inline, you can disable tap mode and begin dropping suspicious traffic without having to reconfigure the cabling between the FTD and the network.
D is not correct
D is the correct Answer.