Implementing Cisco SD-WAN Solutions (ENSDWI) — Question 300

Which component is used for stateful inspection of TCP, UDP, and ICMP flows in Cisco SD-WAN firewall policies?

Answer options

• A. subnets
• B. sites
• C. interfaces
• D. zones

Correct answer: D

Explanation

The correct answer is D, as zones are specifically designed to manage and monitor the state of traffic flows in firewall policies. The other options, such as subnets, sites, and interfaces, do not provide the same level of stateful inspection functionality required for handling TCP, UDP, and ICMP protocols.