What is a valid Security Zone type in PAN-OS?

The correct answer is D. Tap. PAN-OS supports the following Security Zone types: Tap, Virtual Wire, Layer 2, Layer 3, External, and Tunnel. A Tap zone is used for passive monitoring - the firewall receives a copy of traffic from a switch SPAN/mirror port and inspects it without being inline. 'Management' is…

Submitted by alyssa_d· Apr 18, 2026Configure

Question

Options

AManagement
BLogical
CTransparent
DTap

How the community answered

(28 responses)

A
7% (2)
B
4% (1)
D
89% (25)

Explanation

PAN-OS supports the following Security Zone types: Tap, Virtual Wire, Layer 2, Layer 3, External, and Tunnel. A Tap zone is used for passive monitoring - the firewall receives a copy of traffic from a switch SPAN/mirror port and inspects it without being inline. 'Management' is an interface type, not a zone type. 'Logical' and 'Transparent' are not valid PAN-OS zone types at all.

Topics

#Security Zones#PAN-OS#Zone Types#Network Configuration

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice