A security engineer must deploy a Cisco FTD appliance as a bump in the wire to detect intrusion events without disrupting the flow of network traffic. Which two features must be configured to…

An inline set pair configures two physical interfaces on the FTD to act as a single logical connection, allowing traffic to flow directly through the appliance. This establishes the 'bump in the wire' inline deployment.

Transparent mode is an inline deployment, but it actively inspects and potentially blocks traffic, which could disrupt flow if bypass is not configured or if the device fails without a hardware bypass.

Tap mode, when applied to an inline set, configures the FTD to passively monitor all traffic passing through the inline interfaces for intrusion events without actively blocking or modifying it. This ensures that network traffic continues to flow uninterrupted, even if threats are detected, fulfilling the requirement of detecting intrusion events without disruption.

Passive interfaces are for out-of-band monitoring of mirrored traffic, not for a 'bump in the wire' inline deployment.

Bridged mode is another term for transparent mode, which actively inspects and potentially blocks traffic, contrary to the 'without disrupting flow' requirement.