Which statement is not one of the two simple DEFAULT SPI firewall rules for packets that attempt to open connections?

• A. Permit internal to external
• B. Permit external to internal
• C. Deny all such traffic
• D. Permit both internal to external and external to internal

Answer: (C)

Stateful firewall rules for new connection attempts typically start with two simple directions: allow internal to external so internal hosts can reach outside networks, and deny external to internal to block unsolicited inbound connection attempts. Deny all such traffic does not fit this pair because the baseline explicitly includes permitting outbound connections while blocking inbound ones. A blanket denial would also prevent legitimate outbound access and isn’t one of the two standard defaults.