Network Security Analyst

A security analyst is defining Access Control Lists for each firewall zone. After entering the specific allow and deny rules based on source and destination addresses and ports, which rule should be configured as the final rule in the list?

While designing firewall zones, an analyst must place public-facing web servers so they are separated from systems holding sensitive data. According to the recommended segmentation strategy, what should the analyst create for these public-facing services?