300-415 Question #281: Real Exam Question with Answer & Explanation

The correct answer is D: source zone, destination zone, and zone pair. The fundamental components of zone configuration in an application-aware firewall are source zones, destination zones, and zone pairs.

Security and Quality of Service

Question

What are the components of zone configuration in an application-aware firewall?

Options

Adestination zone, interface zone, source zone, and zone pair
Bsource zone, interface zone, and zone pair
Cdestination zone, interface zone, and zone pair
Dsource zone, destination zone, and zone pair

Explanation

The fundamental components of zone configuration in an application-aware firewall are source zones, destination zones, and zone pairs.

Common mistakes.

A. "interface zone" is not a standard, distinct component of zone configuration in the same way source, destination, and zone pairs are; interfaces are assigned to zones, but "interface zone" itself is not a primary component.
B. This option omits the "destination zone," which is a critical part of defining a traffic flow in a zone pair.
C. This option omits the "source zone," which is a critical part of defining a traffic flow in a zone pair.

Concept tested. Zone-based firewall components

Reference. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-cr-book/security-overview.html

Topics

#Zone-Based Firewall#Security Zones#Zone Pair#Firewall Components

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice