What is a feature of a Cisco IOS Zone-Based Policy Firewall?

IT Exam Items RepositoryCategory: CCNA SecurityWhat is a feature of a Cisco IOS Zone-Based Policy Firewall?

What is a feature of a Cisco IOS Zone-Based Policy Firewall?

  • Router management interfaces must be manually assigned to the self zone.
  • A router interface can belong to only one zone at a time.
  • Service policies are applied in interface configuration mode.
  • The pass action works in multiple directions.

Explanation: The pass action allows traffic in only one direction. Interfaces automatically become members of the self zone. Interfaces are assigned to a zone in interface configuration mode, but most configuration takes place in global configuration mode and associated submodes. An interface can belong to only one zone at a time.

Related exam: CCNP Core Networking: Modules 25 - 26 Checkpoint Exam: Access Control and Infrastructure Security Exam
Related exam: CCNA Security Final Exam Answers