A small branch office needs to deploy a cost effective network security solution that offers the capability to deploy several security zones services. Which type of firewall meets these requirements?

The correct answer is D. IOS zone-based firewall solution on existing branch office router. The IOS Zone-Based Firewall (ZBF) is the most cost-effective solution for a small branch office because it runs directly on an existing Cisco IOS router - no additional hardware is needed. ZBF supports multiple security zones (e.g., inside, outside, DMZ) with granular policy…

Security Services

Question

Options

AASA 1000v virtual firewall
Bvirtual security gateway
CASA firewall in multicontext mode
DIOS zone-based firewall solution on existing branch office router

How the community answered

(20 responses)

A
5% (1)
B
5% (1)
D
90% (18)

Explanation

The IOS Zone-Based Firewall (ZBF) is the most cost-effective solution for a small branch office because it runs directly on an existing Cisco IOS router - no additional hardware is needed. ZBF supports multiple security zones (e.g., inside, outside, DMZ) with granular policy control between them. The ASA 1000v (A) is a virtual firewall designed for data centers and cloud environments, not branch offices. The Virtual Security Gateway (B) is specific to VMware virtualized environments. The ASA in multicontext mode (C) requires dedicated ASA hardware, making it more expensive and over-engineered for a small branch.

Topics

#zone-based firewall#branch security#IOS ZBF#security zones

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice