PCNSA · Question #114
The External zone type is used to pass traffic between which type of objects?
The correct answer is D. virtual systems. The 'External' zone type in a Palo Alto Networks firewall is specifically used to allow traffic flow and facilitate communication between different virtual systems (vSys).
Question
The External zone type is used to pass traffic between which type of objects?
Options
- ALayer 2 interfaces
- BLayer 3 interfaces
- Cvirtual routers
- Dvirtual systems
How the community answered
(35 responses)- B6% (2)
- C3% (1)
- D91% (32)
Why each option
The 'External' zone type in a Palo Alto Networks firewall is specifically used to allow traffic flow and facilitate communication between different virtual systems (vSys).
Layer 2 interfaces are grouped into Layer 2 zones for traditional switching operations, not External zones.
Layer 3 interfaces are grouped into Layer 3 zones for routing and firewalling functions within a virtual system, not External zones.
Virtual routers are used for routing packets within a virtual system or between virtual systems via an external zone, but the External zone itself facilitates traffic *between* virtual systems, not between virtual routers directly.
The 'external' zone type is a special zone used in a multi-vsys deployment to connect virtual systems, allowing traffic to be forwarded from one virtual system to another, effectively acting as an inter-vsys conduit.
Concept tested: Palo Alto Networks Zone Types (External zone)
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/virtual-systems/configure-inter-vsys-traffic-forwarding/zones-for-inter-vsys-traffic-forwarding
Topics
Community Discussion
No community discussion yet for this question.