Hi,
I believe system-services allowed in that specific zone would do this:
set security zones security-zone xxx host-inbound-traffic system-services ping
This would allow ping to the IP address configured on the interfaces in that zone.
Cheers,
Ashvin