Given the topology, which zone type should zone A and zone B to be configured with?

The correct answer is A. Layer3. Layer3 is the correct zone type. In a standard routed network topology where the firewall performs IP routing between segments, interfaces are configured as Layer 3 interfaces with IP addresses, and their corresponding zones are Layer 3 zones. Layer 3 zones support NAT…

Submitted by zhang_li· Apr 18, 2026Configure

Question

Exhibit

Options

ALayer3
BTap
CLayer2
DVirtual Wire

How the community answered

(22 responses)

A
91% (20)
B
5% (1)
D
5% (1)

Explanation

Layer3 is the correct zone type. In a standard routed network topology where the firewall performs IP routing between segments, interfaces are configured as Layer 3 interfaces with IP addresses, and their corresponding zones are Layer 3 zones. Layer 3 zones support NAT, routing, and full policy enforcement. Tap zones (choice B) are passive, mirror-only deployments. Layer 2 zones (choice C) are for transparent bridging without IP routing. Virtual Wire zones (choice D) are for bump-in-the-wire deployments where the firewall is inserted transparently without changing IP addressing. Without the image, the standard routed topology answer is Layer3.

Topics

#Zone Types#Interface Configuration#Security Zones#Network Segmentation

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice