What are two PBR characteristics of the Cisco ACI Active-Active Across Pods deployment mode in Cisco ACI Multi-Pod design? (Choose two.)

In an active-active firewall cluster with PBR, the ACI fabric dynamically redirects traffic to the specific firewall instance that owns the connection state. This ensures that all packets belonging to an existing flow are consistently sent to the same firewall for stateful inspection and processing, which is critical for maintaining connection integrity in stateful services.

The "transparent mode" refers to a firewall's internal operational mode (Layer 2 bridge), not a characteristic of ACI's PBR deployment method for stateful services.

For an active-active firewall cluster, especially one stretched across pods, the connection state must be synchronized between cluster members to provide high availability and failover capabilities.

The "go-to" mode is the specific PBR deployment method used in Cisco ACI when integrating stateful services like firewalls in an active-active manner. In "go-to" mode, the ACI fabric changes the next hop of the redirected traffic to the service device's IP address, allowing the service device to perform its function and then route the traffic back into the fabric.

While misconfigurations can lead to asymmetric traffic, the design goal of active-active PBR with stateful firewalls is to maintain traffic symmetry for a given flow by directing it to the connection-owning firewall, which is achieved through dynamic redirection.