What is the only permitted operation for processing multicast traffic on zone-based firewalls?

What is the only permitted operation for processing multicast traffic on zone-based firewalls?

A. Only control plane policing can protect the control plane against multicast traffic.

B. Stateful inspection of multicast traffic is supported only for the self-zone.

C. Stateful inspection for multicast traffic is supported only between the self-zone and the internal zone.

D. Stateful inspection of multicast traffic is supported only for the internal zone.

View Answer

Answer: A

Explanation:

Neither Cisco IOS ZFW or Classic Firewall include stateful inspection support for multicast traffic. So the only choice is A.

Source: http://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design­guide.html