A network engineer is deploying a Cisco Secure Firewall Threat Defense (FTD) sensor to protect a data center segment. The security team requires that the sensor be able to actively drop malicious traffic in real time before it reaches the protected servers, without deploying the device as a routed or transparent Layer 3/2 firewall. Which interface deployment mode should the engineer configure on the FTD?