Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 25

Intelligent Traffic Offload (ITO) requires a firewall be deployed in which mode?

Answer options

• A. Layer 2
• B. Layer 3
• C. Tap
• D. Vwire

Correct answer: C

Explanation

The correct answer is C, Tap, as this mode allows for passive monitoring and analysis of traffic without interfering with the flow. Layer 2 and Layer 3 modes involve active traffic handling which is not suitable for ITO, while Vwire mode is a specific configuration that also does not align with the requirements for ITO.