Basic Concept: VSYS resource quotas can cap specific rule and object capacities. This prevents one virtual system from exhausting shared configuration capacity.
Why B is Correct: Maximum SSL decryption rules is a valid quota-style limit from the listed options.
Why A is Wrong: Percentage of total CPU utilization mentions a VSYS, zone, or routing concept, but it does not satisfy the specific external-zone, visibility, or resource-control requirement for this virtual system design.
Why C is Wrong: Maximum number of virtual routers mentions a VSYS, zone, or routing concept, but it does not satisfy the specific external-zone, visibility, or resource-control requirement for this virtual system design.
Why D is Wrong: Disk space allocation for logs mentions a VSYS, zone, or routing concept, but it does not satisfy the specific external-zone, visibility, or resource-control requirement for this virtual system design.