Which three interface deployment methods can be used to block traffic flowing through the Palo Alto Networks firewall? (Choose three.)

Layer 2 (L2) mode integrates the firewall transparently into a network segment, acting like a bridge. It can inspect and block traffic based on security policies without requiring IP address changes on devices.

Virtual Wire (VWire) mode is another transparent deployment option, functioning as an invisible segment. It allows the firewall to inspect and block traffic flowing between two network segments without routing or switching.

Tap mode allows the firewall to passively monitor network traffic by receiving a copy of it, but it cannot actively block or prevent traffic from passing through as it is out-of-band.

Layer 3 (L3) mode, or routing mode, positions the firewall as a router, actively routing traffic between different IP subnets. In this mode, it can fully inspect and block traffic based on security policies.

HA (High Availability) is a deployment feature that provides redundancy and fault tolerance for firewalls, not an interface deployment method for blocking traffic itself.