Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 271

Which three interface deployment methods can be used to block traffic flowing through the Palo Alto Networks firewall? (Choose three.)

Answer options

• A. Tap
• B. HA
• C. Layer 3
• D. Layer 2
• E. Virtual Wire

Correct answer: C, D, E

Explanation

The correct answer includes Layer 3, Layer 2, and Virtual Wire, as these methods are designed to actively manage and control traffic flow. Tap mode, on the other hand, is a passive deployment method that does not block traffic, and HA (High Availability) is primarily focused on redundancy rather than traffic control.