Exam 350-701 topic 1 question 137 discussion

Answer should be C https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Security__Internet_Access__and_Communication_Ports.html 8305/tcp Securely communicate between appliances in a deployment. " If you change this port, you must change it for all appliances in the deployment. We recommend you keep the default."

The answer is C from Cisco website and specifically this paragraph, “ In this case you must also change the port on FMC (Configuration > Management Interfaces > Shared Settings). This affects all other devices that are already registered to the same FMC. Cisco strongly recommends that you keep the default settings for the remote management port, but if the management port conflicts with other communications on your network, you can choose a different port. If you change the management port, you must change it for all devices in your deployment that need to communicate together.” And here is the link https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215540-configure-verify-and-troubleshoot-firep.html

C. Manually change the management port on Cisco FMC and all managed Cisco FTD devices.

The answer is C. However if you overthink it it could also be A. however in the form the question is asked it should be C. Cisco FMC has the ability to push configuration changes to managed Cisco FTD devices automatically, so changing the management port on the FMC can be propagated to all managed FTD devices without the need for manual intervention on each device. This can be done through the use of FlexConfigs or the Configuration Deployments feature in the FMC. FlexConfigs allow for the execution of custom commands on managed devices, including configuration changes. The FMC can be configured to push a FlexConfig that changes the management port on all managed FTD devices at once.

I prefer C

Cisco strongly recommends that you keep the default settings for the remote management port, but if the management port conflicts with other communications on your network, you can choose a different port. If you change the management port, you must change it for all devices in your deployment that need to communicate with each other.

Answer is C. The sftunnel is created once the communication is stablished - https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215540-configure-verify-and-troubleshoot-firep.html "Once the registration is done the FTD and the FMC establish a secure tunnel called sftunnel (the name derives from the Sourcefire tunnel)."

Answer is C

The answer is C

The answer is C... When you change the default port, you have to change it manually on all FTD devices in the deployment.

C should be the correct answer; we can change the port manually: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215540-configure-verify-and-troubleshoot-firep.html#anc7