when configuring a zone-based policy firewall what will be the resulting action if you do not specify any zone pairs for a possible pair of zones?