In routed mode, how does the Cisco ASA or FTD handle traffic between interfaces?

It switches traffic based on VLAN tags, isolating traffic between interfaces.

It forwards all traffic without inspection, acting as a simple wire.

It bridges traffic at Layer 2, using MAC addresses to forward frames.

It routes traffic at Layer 3, making forwarding decisions based on IP addresses and performing NAT when configured.

Which statement is true about multi-instance mode on Cisco FTD?

Each instance has its own management plane and can be managed independently.

All instances share the same configuration and security policy.

Instances cannot be used for data traffic, only for management.

Instances are limited to two per device.

When would you choose transparent mode over routed mode for a Cisco ASA/FTD deployment?

When you need to perform NAT on traffic between different subnets.

When you need to support multiple virtual firewalls on one device.

When you want to insert the firewall into an existing network without changing the IP addressing scheme.

When you need the firewall to act as a default gateway for clients.

Which deployment mode is most appropriate when you need to provide separate security policies for multiple customers on a single appliance?

Routed mode with multiple interfaces

CCIE Security

Domain 1Objective 1

1.1 Deployment Modes on Cisco ASA and Cisco FTD CCIE-SECURITY Practice Questions (Page 1)

Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

7concepts

20%of the exam

Questions 1–5

1foundation · easy
In routed mode, how does the Cisco ASA or FTD handle traffic between interfaces?
Select an answer first
2foundation · easy
Which statement is true about multi-instance mode on Cisco FTD?
Select an answer first
3foundation · easy
When would you choose transparent mode over routed mode for a Cisco ASA/FTD deployment?
Select an answer first
4foundation · easy
Which deployment mode is most appropriate when you need to provide separate security policies for multiple customers on a single appliance?
Select an answer first
5foundation · easy
Which command is used on a Cisco ASA to change from single context to multi-context mode?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.