ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam
Go to Exam

Exam PCNSE topic 1 question 550 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 550
Topic #: 1
[All PCNSE Questions]

A company wants to implement threat prevention to take action without redesigning the network routing.

What are two best practice deployment modes for the firewall? (Choose two.)

  • A. Virtual Wire
  • B. Layer 2
  • C. Layer 3
  • D. TAP
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️
by anholy at Sept. 4, 2023, 12:32 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
evilCorpBot7494
8 months ago
Selected Answer: AB
Answers are A and B. They wouldn't require network redesign and can still apply the threat prevention profiles. TAP wouldn't need to redesign the network, but since the firewall won't be in-line with the traffic, it wouldn't be able to apply the threat prevention. Layer 3 would require a redesign of the network.
upvoted 3 times
...
Marshpillowz
9 months, 1 week ago
Selected Answer: AB
A and B are correct
upvoted 1 times
...
tune_in
1 year ago
Selected Answer: AB
Firewalls in Layer 2 or virtual wire mode can inspect and provide threat prevention for the tagged traffic.
upvoted 1 times
...
Miczola
1 year, 1 month ago
What do you mean it seems right?
upvoted 2 times
...
anholy
1 year, 2 months ago
seems right. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/configure-interfaces/virtual-wire-interfaces
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago