Free Cisco 300-710 Actual Exam Questions - Question 4 Discussion
its intrusion detection functionality. There is a requirement to analyze the traffic going across the
device, alert on any malicious traffic, and appear as a bump in the wire How should this be
implemented?
Maybe D is the best choice here since it keeps the device inline without needing to change any IP routing or addressing. Options A and C would require IP adjustments, which goes against the “bump in the wire” idea where the device should be invisible. B involves routing, so it wouldn’t be just a transparent bump. Bridging in transparent mode lets the Firepower analyze traffic passively but still alert on threats, which matches the question’s requirements perfectly.
Totally agree that it’s about staying inline and invisible here. Another way to look at it: A and C both suggest changing IP configs or routing, which would mess with the “bump in the wire” aspect. B involves routing, which breaks the transparent mode promise. So D is really the only option that fits the need to inspect traffic without altering how devices see the network. D
Option D makes sense since transparent mode lets the device inspect traffic without changing IP addressing or routing, keeping it inline and invisible to end devices. That fits the bump in the wire requirement.
Sounds like it’s about keeping traffic inline but hidden. I think D fits best-transparent bridge mode makes it a bump in the wire. D