Designing Cisco Network Service Architectures (ARCH) (#65)

Refer to the exhibit. A customer requires a web application implementation, but the web server has communication only to the application server and users, and the database server has communication only to the application server. What firewall design is the best fit for this scenario?

transparent mode with the servers on the same subnet
routed mode with three security zones
transparent mode with three security zones
routed mode with two security zones