Regarding the description of the default security zone of the USG series security firewall, which one is correct?

Question

Options

• AThere are 4 default security zones
• BThe default security zone can be deleted
• CThe security level of the default safe zone can be modified
• DThe default security zone cannot be deleted, but the security level can be modified.

• A
  76% (19)
• B
  12% (3)
• C
  4% (1)
• D
  8% (2)

Explanation

Option A is correct because Huawei USG series firewalls ship with exactly four predefined security zones: Local (level 100), Trust (level 85), DMZ (level 50), and Untrust (level 5). Option B is wrong because default security zones are protected system zones and cannot be deleted, only custom zones can be removed. Option C is wrong because the security levels assigned to the four default zones are fixed and cannot be changed, though user-created zones do allow level modification. Option D is partially true in that default zones cannot be deleted, but it incorrectly states that their security levels can be modified, making the full statement false.

Memory tip: Think of the four default zones as LTDU - Local, Trust, DMZ, Untrust - locked in place by the system, levels and all. "Locked" is the key word: you cannot delete them and you cannot change their levels.

No community discussion yet for this question.