Internal firewalls are primarily intended to protect against threats originating from where?

• A. Inside the Organization
• B. The Internet
• C. Internal Servers Only
• D. External Contractors

Answer: (A)

Internal firewalls sit inside the network to control traffic between internal segments and enforce security policies where critical resources reside. Their purpose is to stop threats that originate from within the organization—such as a compromised workstation, a malware-infected device, or a rogue application—from moving laterally to reach other systems or sensitive data. This east-west traffic control limits the spread of breaches once an attacker or infected device is inside the trusted boundary. Perimeter defenses handle traffic from outside the organization, like from the Internet, but internal firewalls focus on threats that originate inside. The other options point to external sources or non-origin-specific threats, which aren’t what internal firewalls are primarily designed to address.