Topic: 300-710 topic 1 question 69

An administrator is creating interface objects to better segment their network but is having trouble adding interfaces to the objects. What is the reason for this failure?

A.
The interfaces are being used for NAT for multiple networks
B.
The administrator is adding interfaces of multiple types
C.
The administrator is adding an interface that is in multiple zones
D.
The interfaces belong to multiple interface groups

Re: 300-710 topic 1 question 69

B is correct.

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/reusable_objects.html#ID-2243-000009b4

"All interfaces in an interface object must be of the same type: all inline, passive, switched, routed, or ASA FirePOWER. After you create an interface object, you cannot change the type of interfaces it contains."

C can't be correct because you can't have one interface in multiple zones to begin with.

Re: 300-710 topic 1 question 69

All interfaces in an interface object must be of the same type: all inline, passive, switched, routed, or ASA FirePOWER. After you create an interface object, you cannot change the type of interfaces it contains.
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/reusable_objects.html#ID-2243-000009b4
The Interface Objects page of the object manager lists the security zones and interface groups configured on your managed devices. The page also displays the type of interfaces in each interface object, and you can expand each interface object to view which interfaces on which devices belong to each object.

Re: 300-710 topic 1 question 69

B is correct.
All interfaces in an interface object must be of the same type: all inline, passive, switched, routed, or ASA FirePOWER. After you create an interface object, you cannot change the type of interfaces it contains.

Re: 300-710 topic 1 question 69

Correct answer is: B

Re: 300-710 topic 1 question 69

I think the correct answer is B:

All interfaces in an interface object must be of the same type: all inline, passive, switched, routed, or ASA FirePOWER. After you create an interface object, you cannot change the type of interfaces it contains.

Re: 300-710 topic 1 question 69

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/reusable_objects.html#ID-2243-000009b4

Re: 300-710 topic 1 question 69

B - Dariol is right

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/reusable_objects.html#ID-2243-000009b4

All interfaces in an interface object must be of the same type: all inline, passive, switched, routed, or ASA FirePOWER. After you create an interface object, you cannot change the type of interfaces it contains.

Re: 300-710 topic 1 question 69

The correct answer is c.

Re: 300-710 topic 1 question 69

Correct answer is C
Because - Security zones—An interface can belong to only one security zone.

Interface groups—An interface can belong to multiple interface groups (and to one security zone).
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/reusable_objects.html#:~:text=Security%20zones%E2%80%94An%20interface%20can%20belong%20to%20only%20one%20security%20zone.

Re: 300-710 topic 1 question 69

NO, original D answer is correct!

Re: 300-710 topic 1 question 69

B is more fit

Re: 300-710 topic 1 question 69

Interface can belong to multiple groups. Odd answer.