300-710 SNCF: Securing Networks with Cisco FirewallsDemo

By Cisco · Question Mode

QuestionQ25

Deployment

An administrator is attempting to add a new FTD device to an FMC behind a NAT device with a NAT ID of NAT001 and a password of Cisco0123456789. The FMC server’s private IP address is 192.168.45.45, translated to the public IP address 209.165.200.225/27. Which command set must be used to accomplish this task?

  • A configure manager add 209.165.200.225 255.255.255.224
  • B configure manager add 209.165.200.225
  • C configure manager add 209.165.200.225/27
  • D configure manager add 192.168.45.45
Explanation

For an FMC behind NAT, FTD registration requires DONTRESOLVE, the shared registration key, and the NAT ID: configure manager add DONTRESOLVE Cisco0123456789 NAT001. Cisco does not accept a subnet mask or CIDR prefix as part of the FMC host argument. Choice B is the closest available choice because it supplies only a valid host-address form, but the listed choices omit the required registration key and NAT ID.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!