Tap Mode is the right anwer
Link state propagation automatically brings down the second interface in the inline interface pair when one of the interfaces in an inline set goes down
https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html
With tap mode, the FTD is deployed inline, but the network traffic flow is undisturbed.
https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/interface_overview_for_firepower_threat_defense.html#concept_DB45E8BBB07946728427FF98DB2DC56D
Click Advanced to set the following optional parameters:
CORRECT ANSWER (B) Tap Mode — Set to inline tap mode.
INCORRECT ANSWER Propagate Link State:
Link state propagation automatically brings down the second interface in the inline interface pair when one of the interfaces in an inline set goes down. When the downed interface comes back up, the second interface automatically comes back up, also. In other words, if the link state of one interface changes, the device senses the change and updates the link state of the other interface to match it. Note that devices require up to 4 seconds to propagate link state changes. Link state propagation is especially useful in resilient network environments where routers are configured to reroute traffic automatically around network devices that are in a failure state.
what is benefit of TAP mode of inline set?
There are benefits to using tap mode with FTDs that are deployed inline. For example, you can set up the cabling between the FTD and the network as if the FTD were inline and analyze the kinds of intrusion events the FTD generates. Based on the results, you can modify your intrusion policy and add the drop rules that best protect your network without impacting its efficiency. When you are ready to deploy the FTD inline, you can disable tap mode and begin dropping suspicious traffic without having to reconfigure the cabling between the FTD and the network.
The "TAP mode" option under the "Inline Set" properties on the Advanced tab of a Cisco FTD interface configuration also allows the interface to emulate a passive interface. In TAP mode, the interface is configured to passively monitor traffic by copying it to another interface, without actually forwarding or blocking any packets. This is useful for network monitoring or troubleshooting purposes, and can be combined with features like packet capture or intrusion detection.
I guess, but it's the questions that are key, we can work out the answers if need be, and learn something in the process....if all the answers were guaranteed spot on it really would just be a question of memory recall.
I agree with scanossa, TAP mode should be the correct answer.
Propagate link state has nothing to do with passive or active.
Link state propagation automatically brings down the second interface in the inline interface pair when one of the interfaces in an inline set goes down. When the downed interface comes back up, the second interface automatically comes back up.
This section is not available anymore. Please use the main Exam Page.300-710 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
scanossa
Highly Voted 4 years, 2 months agoGrandslam
Most Recent 7 months, 4 weeks agokeen1
9 months agogwb
1 year, 2 months agoLautaros
1 year, 12 months agoJoe_Blue
2 years, 2 months agosis_net_sec
2 years, 3 months agoWeyland
2 years, 6 months agojohnny1001
2 years agojaciro11
2 years, 10 months agoxziomal9
2 years, 11 months agoxziomal9
2 years, 11 months agoorotta
3 years, 3 months agoERGEGA
3 years, 4 months agoSarbi
3 years, 7 months agoBobster02
3 years, 11 months agoASherbiny_1604
4 years, 2 months agoaken0527
4 years, 2 months ago