1.8 Clustering and High Availability Features on Cisco ASA and Cisco FTD CCIE-SECURITY Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   An engineer is configuring an ASA cluster in spanned mode. They have set up the control link and data interfaces. After bringing up the cluster, they notice that traffic is not being forwarded correctly, and some connections are dropped. They suspect that the cluster load-balancing is not working as expected. What is the most likely cause of the issue?

   • AThe cluster is using the default load-balancing algorithm, which is not suitable for spanned mode
   • BThe control link is not configured with a high enough bandwidth
   • CThe data interfaces are not configured as cluster interfaces
   • DThe cluster is using routed mode instead of spanned mode
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company has two ASA 5585-X appliances in active/standby failover. They have configured stateful failover and interface monitoring. During a maintenance window, the primary unit is shut down gracefully. The standby unit becomes active, but when the primary comes back up, it does not automatically become active again. The company wants the primary to resume its role after recovery. What should they configure?

   • AUse the 'failover active' command on the primary unit
   • BEnsure the primary has the same software version as the standby
   • CEnable preemption on the failover group
   • DSet the failover poll time to 1 second
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   An organization is running active/active failover on a pair of ASA appliances in multiple-context mode. They have two failover groups: Group 1 and Group 2. Context A is assigned to Group 1, and Context B is assigned to Group 2. The primary unit is active for Group 1 and standby for Group 2. The secondary unit is active for Group 2 and standby for Group 1. If the primary unit fails completely, what will happen?

   • AThe secondary unit will become active for Group 1, and the primary will remain active for Group 2
   • BThe secondary unit will become active for both groups, and all traffic will be handled by it
   • CThe secondary unit will become active for Group 1, but Group 2 will fail because the primary was active for it
   • DThe secondary unit will become active for Group 1 only, and Group 2 will remain active on the secondary
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A security administrator is configuring FTD active/standby failover using FMC. They have two FTD devices, but they are in different geographic locations connected via a WAN link. They want to ensure that failover works correctly. What is the most important consideration?

   • AThe two FTD devices must be in the same Layer 2 domain
   • BThe FTD devices must have the same management IP address
   • CThe FMC must be located in the same data center as the primary FTD
   • DThe failover link must be a dedicated interface with low latency and high reliability
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A large enterprise is planning to deploy FTD clustering to handle high throughput. They have selected a platform that supports clustering and are using FMC for management. They want to ensure that the cluster provides stateful failover. What is a critical requirement for FTD clustering to provide stateful failover?

   • AThe cluster must use a dedicated control link with at least 10 Gbps bandwidth
   • BThe cluster must be configured in spanned mode
   • CAll cluster members must be in the same Layer 2 domain
   • DConnection state must be replicated between cluster members
   Reveal Solution Discussion Select an answer first