Which of the following are the necessary configurations of the firewall? (Multiple choice)

Question

Options

• AModify the priority of the default security zone
• BClassify the port into the corresponding security zone
• CConfigure security policies between zones
• DConfigure the name of the firewall

• A
  11% (4)
• B
  84% (32)
• D
  5% (2)

Explanation

Options B and C are correct because they represent the two fundamental steps required to make a firewall functional: you must assign interfaces/ports to security zones (B), and you must define policies that control traffic flowing between those zones (C). Without both, the firewall cannot enforce any security boundaries - zones without policies allow no traffic, and policies without zone assignments have nothing to reference.

Why the distractors are wrong:

• A is incorrect because default security zone priorities (e.g., Trust=85, DMZ=50, Untrust=5) are fixed by design and cannot be modified; you work within them, not around them.
• D is incorrect because naming the firewall device is an administrative/management task, not a security policy requirement - the firewall operates regardless of what it's called.

Memory tip: Think of it as a two-step lock system - first sort your traffic into rooms (zones), then set the rules for who can move between rooms (policies). No rooms assigned = no zones to protect. No rules = no enforcement. Both are non-negotiable.

No community discussion yet for this question.