Which two statements describe the two configuration models for Cisco IOS firewalls? (Choose two.)
- ZPF must be enabled in the router configuration before enabling an IOS Classic Firewall.
- The IOS Classic Firewall and ZPF cannot be combined on a single interface.
- IOS Classic Firewalls and ZPF models can be enabled on a router concurrently.
- Both IOS Classic Firewall and ZPF models require ACLs to define traffic filtering policies.
- IOS Classic Firewalls must be enabled in the router configuration before enabling ZPF.
Explanation: There are two configuration models for Cisco IOS Firewalls, IOS Classic Firewalls and zone-based policy firewalls (ZPF). Both configuration models can be enabled concurrently on a router but they cannot be combined on a single interface. One benefit of using ZPF is that ZPF is not dependent on ACLs.
Related exam: Checkpoint Exam: ACLs and Firewalls Group Exam Answers
Related exam: Network Defense - Checkpoint Exam: Firewalls, Cryptography, and Cloud Security Answers
Related exam: Cybersecurity Essentials - Checkpoint Exam: Firewalls, Cryptography, and Cloud Security (Module 14 – 18 Exam)
