Exam 300-710 topic 1 question 24 discussion

"In a multidomain deployment, you can import local intrusion rules in any domain, but you can import intrusion rule updates from Talos in the Global domain only"

this link have a clear table about the update for scope of domain https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/System_Software_Updates.html

The correct answer is B. Local import of intrusion rules should be applied outside of the Global Domain. In a multi-tenant deployment, the Global Domain applies to all tenants, while each tenant has its own domain with its own policies, objects, and configurations. If a minor upgrade or a major upgrade is applied, it should be done globally and affects all tenants. Similarly, the Cisco Geolocation Database should be updated globally as it applies to all tenants. However, intrusion rules can be specific to a tenant's needs and should be imported locally in the tenant's domain to ensure that only the desired rules are applied to that tenant's traffic.

In a multidomain deployment, you can import local intrusion rules in any domain. You can view local intrusion rules imported in the current domain and ancestor domains.

Correct answer is: B

Answer C has no reference as well, B looks more accurate as per below Cisco guide.

the answer is B

B sounds OK

geo IP data and software updates are global only

B is correct answer.

100% agree. B is the only correct answer.

https://www.cisco.com/c/en/us/td/docs/security/firepower/670/configuration/guide/fpmc-config-guide-v67/system_software_updates.html B fits better In a multidomain deployment, you can import local intrusion rules in any domain. You can view local intrusion rules imported in the current domain and ancestor domains.