A customer wants to set up a VLAN interface for a Layer 2 Ethernet port. Which two mandatory options are used to configure a VLAN interface? (Choose two.)

The correct answer is A. Virtual router B. Security zone. When configuring a VLAN interface (a logical Layer 3 interface built on top of a Layer 2 VLAN), two settings are mandatory: (1) Security Zone - every interface must be assigned to a security zone so that the firewall can apply security policies to traffic entering or leaving…

Submitted by diego_uy· Apr 18, 2026Deploy and Configure

Question

Options

AVirtual router
BSecurity zone
CARP entries
DNetflow Profile

How the community answered

(22 responses)

A
91% (20)
C
5% (1)
D
5% (1)

Explanation

When configuring a VLAN interface (a logical Layer 3 interface built on top of a Layer 2 VLAN), two settings are mandatory: (1) Security Zone - every interface must be assigned to a security zone so that the firewall can apply security policies to traffic entering or leaving that interface; (2) Virtual Router - the interface must be assigned to a virtual router so the firewall knows how to route traffic to and from that subnet. ARP entries and NetFlow profiles are optional configuration elements and are not required to bring a VLAN interface online.

Topics

#VLAN Configuration#Interface Configuration#Virtual Router#Security Zones

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice