Implementing Cisco Network Security (IINS, legacy) — Question 78

How does a zone-based firewall implementation handle traffic between interfaces in the same zone?

Answer options

• A. Traffic between two interfaces in the same zone is allowed by default
• B. Traffic between interfaces in the same zone is blocked unless you apply a service policy to the zone pair
• C. Traffic between interfaces in the same zone is always blocked

Correct answer:

Explanation

The correct answer is A, as zone-based firewalls permit traffic between interfaces in the same zone by default. Options B and C are incorrect because they imply restrictions that do not apply to traffic within the same zone, which is inherently allowed.