Palo Alto Networks NGFW Engineer — Question 21

Which two statements describe an external zone in the context of virtual systems (VSYS) on a Palo Alto Networks firewall? (Choose two.)

Answer options

• A. It is associated with an interface within a VSYS of a firewall.
• B. It is a security object associated with a specific virtual router of a VSYS.
• C. It is not associated with an interface; it is associated with a VSYS itself.
• D. It is a security object associated with a specific VSYS.

Correct answer: C, D

Explanation

The correct answers are C and D because an external zone is defined at the VSYS level and does not rely on a specific interface. Options A and B incorrectly suggest that the external zone is tied to an interface or a virtual router, which is not the case.