Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 506

A prospect is eager to conduct a Security Lifecycle Review (SLR) with the aid of the Palo Alto Networks NGFW. Which interface type is best suited to provide the raw data for an SLR from the network in a way that is minimally invasive?

Answer options

• A. Layer 2
• B. Virtual Wire
• C. Tap
• D. Layer 3

Correct answer: C

Explanation

The correct answer is C, Tap, as it allows the NGFW to monitor traffic without interfering with the data flow, making it minimally invasive. Layer 2 and Layer 3 interfaces can alter traffic behavior, while Virtual Wire is less effective in providing raw data compared to Tap.