In ______ filtering, the firewall can filter packets when they are entering or leaving the network.

• A. Ingress
• B. Egress
• C. Both A and B
• D. Neither A nor B

Answer: (C)

This is about filtering traffic in both directions at the network boundary. Ingress filtering covers packets entering the network from outside, while egress filtering covers packets leaving the network to the outside. A firewall that can filter as packets are entering or leaving is effectively enforcing policies for both inbound and outbound traffic, making both directions supported. If a firewall only did ingress filtering, it would protect against outside threats coming in but not prevent data leaving; if only egress filtering, it would block outbound data but not control what enters. Modern firewalls often implement both, enabling comprehensive protection of the network boundary.