Which two statements describe the two configuration models for Cisco IOS firewalls? (Choose two.)

Which two statements describe the two configuration models for Cisco IOS firewalls? (Choose two.)

• ZPF must be enabled in the router configuration before enabling an IOS Classic Firewall.
• The IOS Classic Firewall and ZPF cannot be combined on a single interface.
• IOS Classic Firewalls and ZPF models can be enabled on a router concurrently.
• Both IOS Classic Firewall and ZPF models require ACLs to define traffic filtering policies.
• IOS Classic Firewalls must be enabled in the router configuration before enabling ZPF.

Explanation: There are two configuration models for Cisco IOS Firewalls, IOS Classic Firewalls and zone-based policy firewalls (ZPF). Both configuration models can be enabled concurrently on a router but they cannot be combined on a single interface. One benefit of using ZPF is that ZPF is not dependent on ACLs.

Exam with this question: Checkpoint Exam: ACLs and Firewalls Group Exam Answers
Exam with this question: Checkpoint Exam: Firewalls, Cryptography, and Cloud Security Answers