Palo Alto Networks NGFW Engineer — Question 1

Which zone type allows traffic between zones in different virtual systems (VSYS), without the traffic leaving the firewall?

Answer options

• A. Isolated
• B. Transient
• C. External
• D. Internal

Correct answer: C

Explanation

The correct answer is C, as the External zone type is specifically designed to permit traffic between different virtual systems without it exiting the firewall. The other options, such as Isolated, Transient, and Internal, do not facilitate this type of inter-VSYS communication.