Which statement best describes Cisco IOS Zone-Based Policy Firewall?
OR
Which statement about Cisco IOS Zone-Based Policy Firewall is true?
A.
A router interface can belong to multiple zones.
B.
The pass action works in only one direction.
C.
Policy maps are used to classify traffic into different traffic classes, and class maps are used to assign action to the traffic classes.
D.
A zone-pair is bidirectional because it specifies traffic flowing among the interfaces within the zone-pair in both directions.
Explanation:
One of the principles of zone-based firewalls is that policies are unidirectional.