PCNSA · Question #24
Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?
The correct answer is B. Tap. A Tap interface is specifically designed for passive traffic monitoring and does not participate in packet forwarding or allow for traffic shaping or active security enforcement.
Question
Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?
Options
- ALayer 2
- BTap
- CLayer 3
- DVirtual Wire
How the community answered
(18 responses)- B94% (17)
- C6% (1)
Why each option
A Tap interface is specifically designed for passive traffic monitoring and does not participate in packet forwarding or allow for traffic shaping or active security enforcement.
Layer 2 interfaces are used for switching and can participate in traffic shaping policies.
A Tap interface (also known as a passive interface) is deployed out-of-band to simply receive a copy of network traffic for monitoring, logging, and analysis, without modifying or forwarding any packets, thus it cannot perform traffic shaping.
Layer 3 interfaces are routing interfaces that actively forward packets and can enforce traffic shaping.
Virtual Wire interfaces transparently connect two network segments and can apply security policies, including traffic shaping, to the passing traffic.
Concept tested: Palo Alto Networks interface types - Tap mode
Source: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/network/interface-management/configure-a-tap-interface
Topics
Community Discussion
No community discussion yet for this question.