nerdexam
Cisco

300-415 · Question #254

What are the two components of an application-aware firewall? (Choose two.)

The correct answer is C. zone pair. An application-aware firewall's structural components define how traffic is inspected and policies are applied between network segments.

Security and Quality of Service

Question

What are the two components of an application-aware firewall? (Choose two.)

Exhibit

300-415 question #254 exhibit

Options

  • Adefault action
  • Bsequence
  • Czone pair
  • Dlists

How the community answered

(35 responses)
  • A
    3% (1)
  • C
    94% (33)
  • D
    3% (1)

Why each option

An application-aware firewall's structural components define how traffic is inspected and policies are applied between network segments.

Adefault action

A default action is a policy setting that dictates the behavior for unmatched traffic, but it is a policy configuration detail rather than a core structural component of the firewall itself.

Bsequence

A sequence number is used to order rules within a policy, determining their processing order, but it is an attribute of a rule, not a primary component of the firewall architecture.

Czone pairCorrect

In the context of an application-aware firewall, zone pairs define the source and destination security zones between which traffic is inspected. This fundamental building block enables the application of security policies like firewalls.

Dlists

Lists, such as access control lists or application lists, define criteria for matching traffic but are typically applied within firewall rules rather than being a primary structural component like a zone pair.

Concept tested: Application-aware firewall components

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_zbfw/configuration/xe-16/sec-data-zbfw-xe-16-book/sec-zbfw-config.html

Topics

#Application Firewall#Firewall Components#Zone-Based Firewall#Network Security

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice