What is a functional difference between a Cisco ASA and Cisco IOS router with Zone-Based Policy Firewall?

The correct answer is A. The Cisco IOS router with Zone-Based Policy Firewall denies all traffic by default, whereas the. ZFW default policy between zones is deny all. If no policy is explicitly configured, all traffic that moves between zones is blocked. By default, ASA allows a flow of traffic from higher security levels to lower security levels. If the traffic is initiated by the devices in highe

Submitted by ashley.k· Mar 30, 2026Network Security

Question

Options

AThe Cisco IOS router with Zone-Based Policy Firewall denies all traffic by default, whereas the
BThe Cisco IOS router with Zone-Based Policy Firewall can be configured for high availability,
CThe Cisco ASA can be configured for high availability whereas the Cisco IOS router with Zone-
DThe Cisco ASA denies all traffic by default whereas the Cisco IOS router with Zone-Based Policy

How the community answered

(47 responses)

A
87% (41)
B
4% (2)
C
6% (3)
D
2% (1)

Explanation

ZFW default policy between zones is deny all. If no policy is explicitly configured, all traffic that moves between zones is blocked. By default, ASA allows a flow of traffic from higher security levels to lower security levels. If the traffic is initiated by the devices in higher security levels, then it will be passed to go through the firewall to reach the devices in lower security levels like outside or DMZ. guide.html#anc15

Topics

#Cisco ASA#ZBFW#Firewall default policies#Network security appliances

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice