How does a zone-based firewall implementation handle traffic between interfaces in the same zone?
A.
Traffic between two interfaces in the same zone is allowed by default.
B.
Traffic between interfaces in the same zone is blocked unless you configure the same security permit command.
C.
Traffic between interfaces in the same zone is always blocked.
D.
Traffic between interfaces in the same zone is blocked unless you apply a service policy to the zone pair.
All traffic to and from a given interface is implicitly blocked when the interface is assigned to a zone, except traffic to and from other interfaces in the same zone, and traffic to any interface on the router.
https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html