- (Exam Topic 5)
A mid-sized company is experiencing higher network bandwidth utilization due to a recent acquisition The network operations team is asked to scale up their one Cisco FTD appliance deployment to higher capacities due to the increased network bandwidth. Which design option should be used to accomplish this goal?

1. A. Deploy multiple Cisco FTD appliances in firewall clustering mode to increase performance.
2. B. Deploy multiple Cisco FTD appliances using VPN load-balancing to scale performance.
3. C. Deploy multiple Cisco FTD HA pairs to increase performance
4. D. Deploy multiple Cisco FTD HA pairs in clustering mode to increase performance

Correct Answer: A

- (Exam Topic 5)
An organization is setting up two new Cisco FTD devices to replace their current firewalls and cannot have any network downtime During the setup process, the synchronization between the two devices is failing What action is needed to resolve this issue?

1. A. Confirm that both devices have the same port-channel numbering
2. B. Confirm that both devices are running the same software version
3. C. Confirm that both devices are configured with the same types of interfaces
4. D. Confirm that both devices have the same flash memory sizes

Correct Answer: B

- (Exam Topic 1)
Which two conditions must be met to enable high availability between two Cisco FTD devices? (Choose two.)

1. A. same flash memory size
2. B. same NTP configuration
3. C. same DHCP/PPoE configuration
4. D. same host name
5. E. same number of interfaces

Correct Answer: BE
https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/212699-configure-ftd-high- Conditions
In order to create an HA between 2 FTD devices, these conditions must be met: Same model
Same version (this applies to FXOS and to FTD - (major (first number), minor (second number), and maintenance (third number) must be equal))
Same number of interfaces
Same type of interfaces
Both devices as part of same group/domain in FMC
Have identical Network Time Protocol (NTP) configuration Be fully deployed on the FMC without uncommitted changes Be in the same firewall mode: routed or transparent.
Note that this must be checked on both FTD devices and FMC GUI since there have been cases where the FTDs had the same mode, but FMC does not reflect this.
Does not have DHCP/Point-to-Point Protocol over Ethernet (PPPoE) configured in any of the interface Different hostname (Fully Qualified Domain Name (FQDN)) for both chassis. In order to check the chassis
hostname navigate to FTD CLI and run this command

- (Exam Topic 2)
An engineer is configuring Cisco FMC and wants to allow multiple physical interfaces to be part of the same VLAN. The managed devices must be able to perform Layer 2 switching between interfaces, including
sub-interfaces. What must be configured to meet these requirements?

1. A. interface-based VLAN switching
2. B. inter-chassis clustering VLAN
3. C. integrated routing and bridging
4. D. Cisco ISE Security Group Tag

Correct Answer: C

- (Exam Topic 5)
An engineer is troubleshooting connectivity to the DNS servers from hosts behind a new Cisco FTD device. The hosts cannot send DNS queries to servers in the DMZ. Which action should the engineer take to troubleshoot this issue using the real DNS packets?

1. A. Use the Connection Events dashboard to check the block reason and adjust the inspection policy as needed.
2. B. Use the packet capture tool to check where the traffic is being blocked and adjust the access control or intrusion policy as needed.
3. C. Use the packet tracer tool to determine at which hop the packet is being dropped.
4. D. Use the show blocks command in the Threat Defense CLI tool and create a policy to allow the blockedtraffic.

Correct Answer: A