Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

A)

It is not A:
Identity Awareness can be deployed in Bridge mode or Route mode

It is not B or C:
Identity awareness supports ClusterXL HA and LS modes.

Therefore D is right!

Answer is D. Explanation

Identity Awareness can be deployed in Bridge mode or Route mode.
– In the Bridge mode, it can use an existing subnet with no change to the hosts’ IP addresses.
– In the Route mode, the Security Gateway acts as a router with different subnets connected to its network interfaces.
For redundancy, you can deploy a Security Cluster in Active-Standby (HA) or Active-Active (LS) modes. Identity awareness supports ClusterXL HA and LS modes.

Identity Awareness can be deployed in Bridge mode or Route mode.

In the Bridge mode, it can use an existing subnet with no change to the hosts’ IP addresses.
In the Route mode, the Security Gateway acts as a router with different subnets connected to its network interfaces.
For redundancy, you can deploy a Security Cluster in Active-Standby (HA) or Active-Active (LS) modes. Identity awareness supports ClusterXL HA and LS modes.

so Answer is “D”

here is the link. Answer is D
https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62007.htm