nerdexam
Cisco

350-701 · Question #611

Which firewall deployment mode allows inspection of traffic between servers in the same IP subnet?

The correct answer is D. transparent. A transparent firewall deployment allows inspection of traffic between servers within the same IP subnet by operating at Layer 2 without modifying IP routing.

Submitted by fatema_kw· Mar 30, 2026Network Security

Question

Which firewall deployment mode allows inspection of traffic between servers in the same IP subnet?

Options

  • Arouted
  • Bmulticontext
  • Cvirtual
  • Dtransparent

How the community answered

(23 responses)
  • B
    4% (1)
  • D
    96% (22)

Why each option

A transparent firewall deployment allows inspection of traffic between servers within the same IP subnet by operating at Layer 2 without modifying IP routing.

Arouted

Routed mode firewalls operate at Layer 3 and require IP addresses on their interfaces, serving as a default gateway and thus performing routing decisions, which is not suitable for inspecting traffic within the same subnet without altering network topology.

Bmulticontext

Multicontext mode refers to running multiple virtual firewalls on a single physical device, which is a deployment architecture, not a mode for traffic inspection within a subnet.

Cvirtual

Virtual mode is not a standard firewall deployment mode; firewalls can be virtual appliances, but this doesn't describe how they inspect intra-subnet traffic.

DtransparentCorrect

In transparent mode, a firewall acts as a Layer 2 bridge and can filter traffic between devices on the same IP subnet without being a default gateway, enabling inspection of intra-subnet traffic while remaining invisible to the network topology.

Concept tested: Transparent firewall deployment mode

Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/concepts_modes.html#pgfId-1025537

Topics

#transparent mode#firewall deployment#Layer 2 inspection#same subnet

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice