Among the following security zones, which one is not the default security zone deployed by the USG series firewall?

The correct answer is A. Outside. "Outside" is not a default security zone on Huawei USG series firewalls - the zone for external, untrusted traffic is called "Untrust," not "Outside." The term "Outside" is associated with Cisco ASA firewalls, making it easy to confuse the two vendors' terminology. Options B…

Network Security

Question

Among the following security zones, which one is not the default security zone deployed by the USG series firewall?

Options

AOutside
BDMZ
CTrust
DLocal

How the community answered

(51 responses)

A
71% (36)
B
4% (2)
C
16% (8)
D
10% (5)

Explanation

"Outside" is not a default security zone on Huawei USG series firewalls - the zone for external, untrusted traffic is called "Untrust," not "Outside." The term "Outside" is associated with Cisco ASA firewalls, making it easy to confuse the two vendors' terminology. Options B (DMZ), C (Trust), and D (Local) are all genuine default zones on the USG series: Trust represents internal, high-privilege networks; DMZ hosts servers accessible from both inside and outside; and Local refers to the firewall device itself.

Memory tip: Huawei uses "Untrust" where Cisco uses "Outside" - remember "U for Untrustworthy Huawei" to avoid mixing up vendor naming conventions on exam day.

Topics

#Security Zones#Firewall Configuration#USG Series#Zone Management

Community Discussion

No community discussion yet for this question.

Full H12-821_V1.0 Practice