Which two actions can a zone-based firewall take when looking at traffic? (Choose two.)

Which two actions can a zone-based firewall take when looking at traffic? (Choose two.)
A . inspect
B . forward
C . drop
D . filter
E . broadcast

View Answer

Answer: AC

Explanation:

Traffic cannot flow between a zone member interface and any interface that is not a zone member. Pass, inspect, and drop actions can only be applied between two zones.

Reference: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html