View all questions & answers for the Palo Alto Next-Generation Firewall Engineer Exam Materials exam


Question 118 Discussion

Question: A firewall administrator is configuring inter-VSYS routing to allow traffic from VSYS_Sales to reach a server in VSYS_Finance on the same device. To create the Security policy rule, which type of zone must the administrator create within each VSYS to represent the source and destination? (Choose one answer)

  • A. External
  • B. Virtual wire
  • C. Layer 3
  • D. Tunnel
Correct Answer: C

Brave-Dump Clients Votes

A 100%

Comments



Anonymous User 2026-02-28 05:30:26

Selected Answers: A


o enable inter-VSYS routing and allow traffic between virtual systems like VSYS_Sales and VSYS_Finance on the same Palo Alto Networks firewall, the administrator must create an External zone within each virtual system (VSYS) to represent the source and destination for security policy rules