When configuring a class map for a zone-based policy firewall, how is the match criteria applied when using the match-all parameter?

IT Questions BankCategory: CCNA SecurityWhen configuring a class map for a zone-based policy firewall, how is the match criteria applied when using the match-all parameter?

When configuring a class map for a zone-based policy firewall, how is the match criteria applied when using the match-all parameter?

  • Traffic must match all of the criteria solely defined by ACLs.
  • Traffic must match at least one of the match criteria statements.
  • Traffic must match all of the match criteria specified in the statement.
  • Traffic must match the first criteria in the statement.

Explanation: In the Identifying traffic step of a ZPF configuration, the syntax for the class-map type inspect command has two parameters, match-any and match-all. The match-all parameter dictates that packets must meet all the match criteria to be considered a member of the class.

Exam with this question: Module 10: Quiz – Zone-Based Firewalls Network Security
Exam with this question: Network Defense: Module 6.4.2 Zone-Based Firewalls Quiz

Subscribe
Notify of
guest

0 Comments
Inline Feedbacks
View all comments