In the DMZ firewall rule, which source network was used when duplicating the LAN rule?

In the DMZ firewall rule, which source network was used when duplicating the LAN rule?

• A. WAN net
• B. DMZ net
• C. LAN net
• D. LAN address

Answer: (C)

When a firewall rule is duplicated onto another firewall or zone, the source field should reflect where the traffic originates. Duplicating a LAN rule onto the DMZ firewall is meant to govern traffic that starts from the LAN and goes toward the DMZ, so the appropriate source network is the LAN net. This captures all hosts in the LAN as the origin for that rule, applying the same policy to LAN-originated traffic without restricting it to a single host (LAN address) or switching the origin to the DMZ or the Internet (WAN net). Using LAN net ensures the rule correctly enforces access for the entire LAN as it moves toward the DMZ.

When a firewall rule is duplicated onto another firewall or zone, the source field should reflect where the traffic originates. Duplicating a LAN rule onto the DMZ firewall is meant to govern traffic that starts from the LAN and goes toward the DMZ, so the appropriate source network is the LAN net. This captures all hosts in the LAN as the origin for that rule, applying the same policy to LAN-originated traffic without restricting it to a single host (LAN address) or switching the origin to the DMZ or the Internet (WAN net). Using LAN net ensures the rule correctly enforces access for the entire LAN as it moves toward the DMZ.