NGFW-ENGINEER · Question #114
What are two valid zone types that can be selected from the zone configuration menu, per Palo Alto Networks best practices? (Choose two.)
The correct answer is A. Layer 3 B. Layer 2. In PAN-OS, the zone type determines how the firewall processes traffic on the interfaces assigned to that zone. The valid, selectable zone types in the zone configuration menu are: Layer 3, Layer 2, Virtual Wire, Tap, Tunnel, GlobalProtect, and External. Layer 3 (A) and Layer 2…
Question
What are two valid zone types that can be selected from the zone configuration menu, per Palo Alto Networks best practices? (Choose two.)
Options
- ALayer 3
- BLayer 2
- CManagement
- DDMZ
How the community answered
(47 responses)- A91% (43)
- C4% (2)
- D4% (2)
Explanation
In PAN-OS, the zone type determines how the firewall processes traffic on the interfaces assigned to that zone. The valid, selectable zone types in the zone configuration menu are: Layer 3, Layer 2, Virtual Wire, Tap, Tunnel, GlobalProtect, and External. Layer 3 (A) and Layer 2 (B) are both valid and commonly used zone types corresponding to how the assigned interfaces operate. Management (C) is not a configurable zone type - the management interface operates outside of the data plane and has its own management profile rather than a security zone. DMZ (D) is a network architecture concept and a common zone name, but it is not a zone type you select from the type dropdown; a DMZ zone would typically be created as a Layer 3 zone type.
Topics
Community Discussion
No community discussion yet for this question.