Huawei Certified ICT Associate – Security (HCIA-Security) — Question 4

Network administrators set up networking as follows:
LAN_A --------- (G0/0) USG_A (G0/1) --------- (G0/0) USG_B (G0/1) -------------- LAN_B
USG_A divides firewall security zones, connects LAN_A areas Trust, connects USG_B area's Untrust, according to the above description, which of the following statement is correct?

Answer options

• A. USG_B G0/0 must join Untrust zone
• B. USG_B G0/0 must join the Trust zone
• C. USG_B G0/1 must join the Trust zone
• D. USG_B G0/0 can join any regional

Correct answer: D

Explanation

The correct answer is D because USG_B G0/0 is not limited to a specific zone; it can be configured to join any zone based on the network requirements. Options A, B, and C incorrectly restrict G0/0 to specific zones, which is not necessary given the established network configuration.