An administrator wants to enable zone protection. Before doing so, what must the administrator consider?

Question

Options

• AActivate a zone protection subscription.
• BTo increase bandwidth no more than one firewall interface should be connected to a zone
• CSecurity policy rules do not prevent lateral movement of traffic between zones
• DThe zone protection profile will apply to all interfaces within that zone

• B
  5% (2)
• C
  2% (1)
• D
  93% (38)

Explanation

A zone protection profile is applied at the zone level, not the interface level. This means every interface assigned to that zone will be subject to the same zone protection settings (flood protection, reconnaissance protection, packet-based attack protection, etc.). Before enabling zone protection, the administrator must confirm the profile settings are appropriate for all interfaces in the zone. (A) Zone protection is a built-in feature requiring no additional subscription. (B) Multiple interfaces can and commonly do belong to a single zone. (C) Is incorrect as stated - Security policy rules absolutely do govern traffic flow between zones; inter-zone traffic is denied by default unless explicitly allowed.

No community discussion yet for this question.