PrepAway - Latest Free Exam Questions & Answers

How many management interfaces are required in order to launch FTDv in an AWS deployment?

How many management interfaces are required in order to launch FTDv in an AWS deployment?

A. 2

B. 1

C. 4

D. 0

Explanation:
In an Amazon Web Services (AWS) deployment, Cisco Firepower Threat Defense Virtual (FTDv) requires two management interfaces in order to launch. FTDv is a Cisco Next-Generation Firewall Virtual (NGFWv) appliance that can provide intrusion detection prevention (IPS), Uniform Resource Locator (URL) filtering, and malware detection in addition to traditional firewall capabilities.

When deployed in an AWS environment, FTDv has several limitations. For example, FTDv requires two management interfaces and two traffic interfaces to complete the launch process and it must be configured to operate in routed mode as passive modes of operation, such as inline or transparent mode, are not supported.

Management interfaces connect the FTDv to a Firepower Management Center (FMC) appliance and are used for diagnostics. By contrast, traffic interfaces are used to connect FTDv to the inside and outside networks. FTDv can be managed locally by using the integrated Firepower Device Manager (FDM) or centrally by using an FMC appliance. However, both management options cannot be configured simultaneously.

Reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/aws/ftdv-aws-gsg/ftdv-aws-intro.html#con_7759445
CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, Chapter 7: Cisco Next-Generation Firewalls and Cisco Next-Generation Intrusion Prevention Systems: Surveying the Cisco FTD Deployment Modes


Leave a Reply