A company wants to implement threat prevention to take action without redesigning the network routing. What are two best practice deployment modes for the firewall? (Choose two.)

The correct answer is A. Virtual Wire B. Layer 2. Virtual Wire (Choice A) and Layer 2 (Choice B) are 'bump-in-the-wire' deployment modes that insert the firewall inline between network segments without requiring any IP addressing changes or routing redesign. Both modes can actively block threats. Layer 3 (Choice C) requires…

Submitted by kavita_s· Apr 18, 2026Plan

Question

Options

AVirtual Wire
BLayer 2
CLayer 3
DTAP

How the community answered

(54 responses)

A
81% (44)
C
6% (3)
D
13% (7)

Explanation

Virtual Wire (Choice A) and Layer 2 (Choice B) are 'bump-in-the-wire' deployment modes that insert the firewall inline between network segments without requiring any IP addressing changes or routing redesign. Both modes can actively block threats. Layer 3 (Choice C) requires the firewall to serve as a routed hop, which mandates IP reconfiguration. TAP mode (Choice D) is a passive, read-only mode that receives a copy of traffic and cannot actively block threats - it can only generate alerts.

Topics

#Firewall Deployment Modes#Virtual Wire#Layer 2 Mode#Network Integration

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice