An interface-management profile that permits ping to a firewall interface automatically permits ping traffic through the firewall.

### Why this is right An interface-management profile applies to the individual firewall interface and services addressed to that interface. Traffic passing through the firewall needs a security policy. ### The concept These controls are easy to confuse because both can affect ping. A host pinging its default gateway is testing access to the firewall interface. A host pinging a remote host across the firewall is testing forwarding and requires appropriate routing and policy as well as reachable endpoints. ### The other options - **True**: this is incorrect because interface management and transit security policy have distinct scopes. ### Terms - **Interface-management profile**: A setting that permits specified services to reach a firewall interface. - **Security policy**: A rule controlling traffic forwarded through the firewall. ### Watch out The word “ping” does not identify the control by itself. Ask whether the destination is the firewall or another host. ### Remember Ping to the firewall is management access; ping through it is transit traffic.