SNCF — Securing Networks with Firepower — Question 214

A network administrator is setting up a new highly available Cisco Secure Firewall Threat Defense (FTD) pair. The administrator wants to monitor that the interfaces on the secondary Secure FTD are reachable not just up. What must the administrator configure?

Answer options

• A. This happens by default when high availability is enabled.
• B. secondary IP address
• C. EUI 64 address on a high-availability link
• D. separate high-availability and failover links

Correct answer: B

Explanation

The correct answer is B, as assigning a secondary IP address allows for monitoring the reachability of the secondary FTD's interfaces. Option A is incorrect because while high availability provides some monitoring, it does not ensure reachability checks. Option C is not applicable because EUI 64 addresses are not relevant in this context. Option D is incorrect because having separate links does not address the need for monitoring interface reachability.