When a Cisco FTD device is configured in transparent firewall mode, on which two interface types can an IP address be configured? (Choose two.)

The Diagnostic interface always operates as a Layer 3 routed interface regardless of the FTD's operating mode, making it suitable for out-of-band management and requiring an IP address even in transparent mode.

EtherChannel interfaces, when part of a bridge group in transparent mode, operate at Layer 2 and do not directly have IP addresses assigned.

The Bridge Virtual Interface (BVI) is a logical Layer 3 interface associated with a bridge group in transparent mode, requiring an IP address for management access to the device and for Layer 3 operations for traffic within the bridged segments.

Physical interfaces, when assigned to a bridge group in transparent mode, operate at Layer 2 and do not directly receive an IP address.

Subinterfaces on physical interfaces, when operating in transparent mode, are also typically assigned to bridge groups at Layer 2 without direct IP addresses.