An engineer must deploy a Cisco FTD device. Management wants to examine traffic without requiring network changes that will disrupt end users. Corporate security policy requires the separation of…

Routed mode requires network changes like updating default gateways on endpoints, which would disrupt end users. A diagnostic interface is not the standard dedicated management interface.

Transparent mode deploys the FTD as a Layer 2 bridge, allowing it to inspect traffic without requiring IP address changes on existing network devices, thus avoiding disruption. A separate management interface ensures administrative traffic is isolated from data plane traffic, meeting security policy requirements.

While transparent mode meets the no disruption requirement, using a data interface for management violates the corporate security policy for traffic separation.

Routed mode requires network changes, and a Bridge Virtual Interface (BVI) is part of Integrated Routing and Bridging (IRB) which is still a Layer 3 routing configuration, not a transparent Layer 2 deployment.