Exam 350-701 topic 1 question 544 discussion

I say F for fantastic is the real answer

agree w C, i believe they are talking about the firewall on an IOS router, which is zone based

hows this possibly C while ASA is NOT a zone based firewall? Unlike FG, FTD...

C. ZBFW

ZBFW - Zones Based Firewall, im with C ASA are with Security Zones...

ASA's do NOT 'need' zones - they can be setup with Sec levels. C.

I would have to agree as well. It is C. ASAs just define security levels.

C. ZBFW (Zone-Based Firewall) Zone-Based Firewall (ZBFW) is a feature available on Cisco IOS routers that allows for the creation of security zones and policies based on those zones. With ZBFW, network administrators can define different security zones and specify the traffic policies and controls between these zones. ZBFW requires the configuration of zone definitions, where interfaces are assigned to specific security zones. Each zone can have its own set of security policies and rules to control the traffic flow between zones.

ZBFW requires zones

Most likely C!

It's C. In ZBFW deployments a zone must be configured before interfaces can be assigned to the zone. In addition, an interface can be assigned to only one security zone. All traffic to and from a given interface in a device with ZBFW configured is implicitly blocked when the interface is assigned to a zone, except traffic to and from other interfaces in the same zone as well as traffic to any interface on the router (that is, the self-zone). IP traffic is implicitly allowed to flow by default among interfaces that are members of the same zone. When you configure ZBFW, in order to permit traffic to and from a zone member interface, a policy allowing or inspecting traffic must be configured between that zone and any other zone

C. ZBFW ZBFW, or Zone-Based Firewall, is a Cisco IOS Firewall solution that requires the definition of zones. This solution treats a router as if it were multiple virtual routers, each of which requires its own rules and policies. In a Zone-Based Firewall setup, interfaces are assigned to zones, and then policies are applied to traffic moving between the zones.