Match each firewall network object to its corresponding function: Network Objects: 1. Virtual router 2. Security zone 3. Interface management profile Functions: A. Determines routing behavior and forwards Layer 3 traffic between assigned interfaces B. Groups interfaces to establish logical boundaries for security policy enforcement C. Specifies which administrative services and protocols are allowed to reach a firewall interface

### The pairs | Item | Matches | Why | |---|---|---| | Virtual router | Routes traffic among assigned Layer 3 interfaces | A virtual router contains interfaces and routes used to determine where packets are forwarded. | | Security zone | Groups interfaces for security-policy decisions | Policies use zones to describe traffic's source and destination context rather than relying only on individual interface names. | | Interface-management profile | Permits selected services to reach an assigned firewall interface | The profile controls services addressed to the firewall interface, such as ping in this lab. | ### Terms - **Layer 3**: The network layer where IP routing occurs. ### Remember Virtual routers forward, zones classify policy context, and management profiles control access to the firewall itself.