Which device in a layered defense-in-depth approach denies connections initiated from untrusted networks to internal networks, but allows internal users within an organization to connect to untrusted networks?

Which device in a layered defense-in-depth approach denies connections initiated from untrusted networks to internal networks, but allows internal users within an organization to connect to untrusted networks?

• firewall
• IPS
• internal router
• access layer switch

Explanation: A firewall is typically a second line of defense in a layered defense-in-depth approach to network security. The firewall typically connects to an edge router that connects to the service provider. The firewall tracks connections initiated within the company going out of the company and denies initiation of connections from external untrusted networks going to internal trusted networks.

Exam with this question: CCNA Cyber Ops Final Exam Answers
Exam with this question: Network Defense - 1.4.2 Module 1: Understanding Defense Quiz
Exam with this question: CyberOps Associate Final Exam Answers