There are multiple default security zones on the USG firewall. The Untrust zone and Local zone cannot be deleted by the administrator, but the Trust zone and DMZ zone can be deleted.

Question

Options

• ATRUE
• BFALSE

• A
  25% (12)
• B
  75% (36)

Explanation

Option B (FALSE) is correct because all four default security zones on Huawei USG firewalls - Trust, Untrust, DMZ, and Local - are permanent and cannot be deleted by an administrator. The statement incorrectly singles out Untrust and Local as the only undeletable zones, while claiming Trust and DMZ can be removed.

Option A is wrong because it accepts a half-true statement as fully true: while it's correct that Untrust and Local cannot be deleted, the claim that Trust and DMZ can be deleted is false, making the entire statement incorrect.

Memory tip: Think of the four default zones as a locked set - "TUDL" (Trust, Untrust, DMZ, Local). None of the four can be deleted; administrators can only create additional custom zones or modify security policies within the defaults. If the exam states any subset of default zones "can be deleted," the answer is always FALSE.

No community discussion yet for this question.