問題文
A campus places student and staff subnets in the same zone and now needs to control traffic between those subnets while leaving traffic that leaves the zone untouched by the new rule. Which rule type fits?
選択肢
- A decryption rule, because the traffic between the two subnets has to be read before a rule can be written that tells the student sessions from the staff ones.
- The type restricted to traffic that crosses a zone boundary, because a rule of that type can still be written with the same zone on both sides and will then apply to the traffic that stays within it as well.
- The type restricted to traffic whose source and destination zone are the same, because the requirement concerns traffic that stays inside the zone.
- The unrestricted type, so the rule covers both cases and the analyst is spared the decision about which of them applies to the traffic on the campus.