Implementing Cisco Network Security (IINS v3.0) (#52)

Which statement about zone-based firewall configuration is true?

The zone must be configured before it can be assigned.
Traffic that is destined to or sourced from the Self zone is denied by default.
You can assign an interface to more than one zone.
Traffic is implicitly denied by default between interfaces in the same zone.