In which two instances will traffic be denied as it crosses the ASA 5506-X device? (Choose two.)

In which two instances will traffic be denied as it crosses the ASA 5506-X device? (Choose two.)

• traffic originating from the inside network going to the outside network
• traffic originating from the inside network going to the DMZ network
• traffic originating from the outside network going to the inside network
• traffic originating from the outside network going to the DMZ network
• traffic originating from the DMZ network going to the inside network

Explanation: When an ASA 5506-X device is being utilized, traffic is denied as it travels from a lower security zone to a higher security zone. The highest security zone is the internal network, the DMZ is usually the next highest, and the outside network is the lowest. Traffic is only allowed to move from a lower security level to a higher if it is in response to originating traffic within the higher security zone.

Exam with this question: Network Security ( Version 1) - Network Security 1.0 Modules 20-22: ASA Group Exam Answers