Which two actions can a zone-based firewall take when looking at traffic? (Choose two.)
A . inspect
B . forward
C . drop
D . filter
E . broadcast
Answer: AC
Explanation:
Traffic cannot flow between a zone member interface and any interface that is not a zone member. Pass, inspect, and drop actions can only be applied between two zones.
Reference: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html