In the USG series firewall, what is the security priority of the DMZ zone?

Question

Options

• A100
• B80
• C50
• D5

• A
  4% (1)
• B
  7% (2)
• C
  85% (23)
• D
  4% (1)

Explanation

In Huawei's USG series firewall, the DMZ (Demilitarized Zone) is assigned a default security priority of 50, placing it between the trusted internal network and the untrusted external network - which reflects its role as a semi-trusted zone hosting public-facing services like web or mail servers.

Why the distractors are wrong:

• A (100) is the priority of the Local zone (the firewall device itself), the most trusted.
• B (80) - sometimes confused with Trust, but the actual Trust zone priority is 85, not 80; this option is a near-miss trap.
• D (5) is the priority of the Untrust zone (the internet/external network), the least trusted.

Memory tip: Think of it as a descending trust ladder - Local (100) → Trust (85) → DMZ (50) → Untrust (5). The DMZ sits exactly in the middle at 50, which makes intuitive sense: it's half-trusted, half-exposed.

No community discussion yet for this question.