The current recommended deployment method of Tianguan is:

Question

Options

• ASecond floor straight road
• BLayer 2 bypass
• CThree-story straight road
• DLayer 3 bypass

• A
  76% (22)
• B
  7% (2)
• C
  3% (1)
• D
  14% (4)

Explanation

Layer 2 inline (straight-road) deployment is the current recommended method for Tianguan because it positions the device transparently in the traffic path at Layer 2, enabling active inspection and blocking of threats without requiring IP routing changes - making it minimally disruptive to the existing network topology while maintaining full enforcement capability.

Why the distractors are wrong:

• B (Layer 2 bypass): Bypass/out-of-band deployment only mirrors traffic; the device can detect threats but cannot block them in real time, which is insufficient for active protection.
• C (Layer 3 straight-road): While inline at Layer 3 is technically possible, it requires the device to participate in routing, adding complexity and potential bottlenecks - not the preferred deployment posture for Tianguan.
• D (Layer 3 bypass): Same blocking limitation as Layer 2 bypass, compounded by routing dependency; offers the least control of all four options.

Memory tip: Think "2 = Transparent + Active." Layer 2 inline is the sweet spot - it's transparent to the network (no IP changes) and active (can block, not just detect). Any "bypass" option means passive-only, and "Layer 3 inline" means routing complexity - both trade-offs you want to avoid.

No community discussion yet for this question.