Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 585

A company wants to implement threat prevention to take action without redesigning the network routing.

What are two best practice deployment modes for the firewall? (Choose two.)

Answer options

• A. Virtual Wire
• B. Layer 2
• C. Layer 3
• D. TAP

Correct answer: A, B

Explanation

The correct options, Virtual Wire and Layer 2, allow the firewall to be deployed transparently without making significant changes to the existing network infrastructure. Layer 3 mode requires routing changes, while TAP mode is primarily for monitoring rather than active prevention.