How does a firewall handle traffic when it is originating from the private network and traveling to the DMZ network?

How does a firewall handle traffic when it is originating from the private network and traveling to the DMZ network?

• The traffic is usually permitted with little or no restrictions.
• The traffic is usually blocked.
• The traffic is selectively permitted and inspected.
• The traffic is selectively denied based on service requirements.
  

  Answers Explanation & Hints: With a three interface firewall design that has internal, external, and DMZ connections, typical configurations include the following: – Traffic originating from DMZ destined for the internal network is normally blocked. – Traffic originating from the DMZ destined for external networks is typically permitted based on what services are being used in the DMZ. – Traffic originating from the internal network destined from the DMZ is normally inspected and allowed to return. – Traffic originating from external networks (the public network) is typically allowed in the DMZ only for specific services.