Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 313

If the firewall interface E1/1 is connected to a SPAN or mirror port, which interface type should E1/1 be configured as?

Answer options

• A. Tap
• B. Virtual Wire
• C. Layer 2
• D. Layer 3

Correct answer: A

Explanation

The correct answer is A, Tap, because this configuration allows the firewall to receive mirrored traffic without participating in the data flow. Options B (Virtual Wire), C (Layer 2), and D (Layer 3) are not suitable as they imply active participation in the data path, which contradicts the purpose of connecting to a SPAN or mirror port.