Given the topology, which zone type should zone A and zone B to be configured with?

The correct answer is A. Layer3. Layer3 zones are the standard zone type for routed network deployments. They are associated with Layer 3 (routed) interfaces, where the firewall performs IP routing between zones. This is the most common enterprise configuration, enabling the firewall to apply security…

Submitted by jordan8· Apr 18, 2026Configure

Question

Exhibit

Options

ALayer3
BEthernet
CLayer2
DVirtual Wire

How the community answered

(34 responses)

A
91% (31)
B
3% (1)
D
6% (2)

Explanation

Layer3 zones are the standard zone type for routed network deployments. They are associated with Layer 3 (routed) interfaces, where the firewall performs IP routing between zones. This is the most common enterprise configuration, enabling the firewall to apply security policies, NAT, and threat inspection to traffic that is routed between the two zones. Layer2 zones (C) are used when the firewall bridges traffic at Layer 2 without routing. Virtual Wire zones (D) are used in bump-in-the-wire deployments where the firewall is transparent with no IP addresses on the interfaces. The 'Ethernet' option (B) is not a valid PAN-OS zone type.

Topics

#Firewall Zones#Network Segmentation#Palo Alto Configuration

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice