Which statement is true when using zone-based firewalls on a Cisco router?

A.
policies are applied to traffic moving between zones, not between interfaces

B.
the firewalls can be configured simultaneously on the same interface as classic CBAC using the ip inspect CLI command

C.
interface ACLs are applied before zone-based policy firewalls when they are applied outbond

D.
when configuring with the ?PASS? action, stateful inspection is applied to all traffic passing between the

Explanation:
configured zones