SNCF — Securing Networks with Firepower — Question 273

An engineer must configure high availability for the Cisco Firepower devices. The current network topology does not allow for two devices to pass traffic concurrently. How must the devices be implemented in this environment?

Answer options

• A. in active/active mode
• B. in a cluster span EtherChannel
• C. in active/passive mode
• D. in cluster interface mode

Correct answer: C

Explanation

The correct answer is C, as active/passive mode allows one device to take over if the other fails, which is suitable for a topology that doesn't support concurrent traffic. Active/active mode (A) would require both devices to handle traffic simultaneously, which isn't possible here. Options B and D do not provide the necessary configuration for high availability in a non-concurrent traffic environment.