NGFW-ENGINEER · Question #76
A network security engineer is segmenting a single firewall into VSYS-A and VSYS-B. For traffic to flow from VSYS-A to VSYS-B, external zones are required. What are two fundamental properties of the e
The correct answer is B. They represent their parent VSYS without being tied to a physical or logical interface. C. They are a security construct belonging to a single VSYS.. External zones act as logical representations of another VSYS and are not bound to any physical or logical interface, enabling inter-VSYS traffic flow, and they are security objects that belong to a single VSYS, allowing security policy enforcement between VSYS contexts.
Question
A network security engineer is segmenting a single firewall into VSYS-A and VSYS-B. For traffic to flow from VSYS-A to VSYS-B, external zones are required. What are two fundamental properties of the external zones needed for this configuration? (Choose two.)
Options
- AThey must be linked to the same virtual router as the ingress interface.
- BThey represent their parent VSYS without being tied to a physical or logical interface.
- CThey are a security construct belonging to a single VSYS.
- DThey are automatically created when inter-VSYS routing is enabled.
How the community answered
(57 responses)- A9% (5)
- B86% (49)
- D5% (3)
Explanation
External zones act as logical representations of another VSYS and are not bound to any physical or logical interface, enabling inter-VSYS traffic flow, and they are security objects that belong to a single VSYS, allowing security policy enforcement between VSYS contexts.
Topics
Community Discussion
No community discussion yet for this question.