Option B:Correct. Interfaces in the same security zone must belong to the same routing instance; zones cannot span multiple routing instances.

Option D:Correct. A security zone can contain multiple interfaces, allowing grouping of similar trust levels (e.g., multiple LAN subnets in a trust zone).

Option A:Incorrect. An interface can belong to only one zone at a time.

Option C:Incorrect. Interfaces within the same zone cannot be split across routing instances.

Correct Statements:Interfaces in the same zone must share the same routing instance, and a zone can contain multiple interfaces.