Cisco Exam 300-730 Topic 4 Question 75 Discussion

Actual exam question for Cisco's 300-730 exam

Question #: 75
Topic #: 4

A network administrator is deploying a Cisco IPS appliance and needs it to operate initially without affecting traffic flows. It must also collect data to provide a baseline of unwanted traffic before being reconfigured to drop it. Which Cisco IPS mode meets these requirements?

Afailsafe

Binline tap

Cpromiscuous

Dbypass
A) failsafe mode is a feature that determines how the appliance behaves when a hardware or software failure occurs. It does not affect the normal traffic flow or analysis3. B. inline tap mode is a variation of inline mode that allows the appliance to pass traffic without inspection in case of a power failure or a software crash. It does not allow the appliance to collect data without affecting traffic4. D. bypass mode is a feature that enables the appliance to bypass traffic without inspection when it is overloaded or under maintenance. It does not allow the appliance to analyze traffic and generate alerts.
1: How the Sensor Functions 2: Cisco ASA IPS Module Quick Start Guide 3: Failsafe Mode 4: Inline Tap Mode : Bypass Mode

Show Suggested Answer

Suggested Answer: C

The correct answer is C. promiscuous mode. In promiscuous mode, the Cisco IPS appliance operates as a passive device that monitors a copy of the network traffic and analyzes it for malicious activity. The appliance does not affect the traffic flow, but it can generate alerts, logs, and reports based on the configured security policy. Promiscuous mode is useful for initial deployment and baseline analysis, as well as for monitoring low-risk segments of the network12.

by Matthew at Oct 22, 2023, 08:03 PM

Limited Time Offer

25%

Off

Get Premium 300-730 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mabelle

6 months ago

Yeah, alright, inline tap it is. Though I still think promiscuous mode would be a better name. Sounds more like something an IPS would do.

upvoted 0 times

...

Lashaunda

6 months ago

Ohh, I see. That makes sense. Okay, I'm going to go with inline tap as the answer then. Seems like the best fit for the scenario.

upvoted 0 times

...

Blair

6 months ago

No, no, it's a real IPS mode. Inline tap allows the IPS to passively monitor the traffic without actually being in the data path. So it can collect data without impacting the network.

upvoted 0 times

...