Exam 300-710 topic 1 question 221 discussion

https://rayka-co.com/lesson/cisco-ftd-transparent-mode/#:~:text=Policy%20and%20Rules-,Delete%20FMC%20manager%20in%20FTD%20and%20also%20FTD%20in%20FMC,already%20connected%20to%20FMC%20manager.&text=We%20have%20to%20isolate%20FTD,to%20be%20removed%20in%20FTD.

See link by Bubu3k

There does not seem to be a way to change FTD mode while registered in FMC.

A is Correct. U first have to unregister the FTD

FTD mode can't be changed when registered with FMC

It's A. If the FTD was in routed mode and registered to FMC, you have to first remove the manager from FTD and deregister from FMC. Then on FTD CLI, configure firewall transparent. Then reregister with FMC and create the bridge group from there.

Guys, only A.

Option A covers the misconfiguration option as well in which you have to deregister and set up in the transparent mode during initial setup

C. Add a Bridge Group Interface to the FTD before transparent mode is configured. To enable transparent mode on a Cisco FTD, you need to configure a bridge group interface. This interface allows the FTD to transparently forward traffic between different interfaces. By configuring the bridge group interface, you can then enable transparent mode and configure other settings as necessary.

Yes, adding a Bridge Group Interface to the FTD before enabling transparent mode can help to enable transparent mode on the FTD. Deregistering the FTD device from the FMC and configuring transparent mode via the CLI can enable transparent mode, but it is not the recommended approach.

Answer-C Adding a Bridge Group Interface to the FTD before configuring transparent mode is necessary because it allows the FTD to forward traffic between two or more interfaces. Transparent mode, by definition, means that the FTD is transparent to the network and does not modify the source and destination IP addresses of the packets that it receives. Therefore, to enable transparent mode, the FTD must have at least two interfaces connected to the same network segment. These interfaces are then placed in a bridge group, which allows the FTD to forward traffic between them without modifying the packets. Without a bridge group interface, the FTD cannot operate in transparent mode, and any attempt to do so will result in the device not passing traffic.

A is the correct answer 100% "steps to change FTD mode: 1- Deregister the FTD device from the FMC. You cannot change the mode until you deregister the device. 2-Access the FTD device CLI 3- Change the firewall mode: configure firewall [routed | transparent]' Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config-guide-v601/fpmc-config-guide-v601_chapter_01101010.html#:~:text=Deregister%20the%20FTD,deregister%20the%20device.

BVIs need to be configured, so Im going with C

I'd go with A - if the FTD is in Routed mode, you have to go into the CLI and de-register it from the FMC before changing it to Transparent mode

Why would you have to do it over CLI? It makes much more sense that a sufficient interface is missing, so C

I agree with C

A is correct. https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/transparent_or_routed_firewall_mode_for_firepower_threat_defense.html