300-415 · Question #254
What are the two components of an application-aware firewall? (Choose two.)
The correct answer is C. zone pair. An application-aware firewall's structural components define how traffic is inspected and policies are applied between network segments.
Question
Exhibit
Options
- Adefault action
- Bsequence
- Czone pair
- Dlists
How the community answered
(35 responses)- A3% (1)
- C94% (33)
- D3% (1)
Why each option
An application-aware firewall's structural components define how traffic is inspected and policies are applied between network segments.
A default action is a policy setting that dictates the behavior for unmatched traffic, but it is a policy configuration detail rather than a core structural component of the firewall itself.
A sequence number is used to order rules within a policy, determining their processing order, but it is an attribute of a rule, not a primary component of the firewall architecture.
In the context of an application-aware firewall, zone pairs define the source and destination security zones between which traffic is inspected. This fundamental building block enables the application of security policies like firewalls.
Lists, such as access control lists or application lists, define criteria for matching traffic but are typically applied within firewall rules rather than being a primary structural component like a zone pair.
Concept tested: Application-aware firewall components
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_zbfw/configuration/xe-16/sec-data-zbfw-xe-16-book/sec-zbfw-config.html
Topics
Community Discussion
No community discussion yet for this question.
