Which policy in the lesson allows a public-facing web server in a demilitarized zone (DMZ) to receive secure web traffic from the Internet?

### Why this is right The rule allows traffic from the less-trusted external zone to the DMZ and limits the service to secure web traffic. This matches the lesson's example of exposing a public web service without placing the server in the internal network. ### The concept A DMZ separates public-facing systems from internal systems. A policy can allow a specific service from the untrusted network to the DMZ while leaving other traffic denied. Reaching the DMZ does not imply permission to reach internal networks. ### The other options - **B. Untrust to Internal, Remote Desktop Protocol (RDP), allow**: it exposes an internal network service rather than the intended DMZ web service. - **C. Internal to Untrust, all services, deny**: it does not permit external users to reach the web server. - **D. DMZ to Internal, all services, allow**: it grants broad access from the DMZ to internal systems, undermining separation. ### Terms - **DMZ**: Demilitarized Zone. A separated network for systems communicating with less-trusted networks. - **HTTPS**: Hypertext Transfer Protocol Secure. A protocol for secure web communication. - **RDP**: Remote Desktop Protocol. A protocol for remote desktop connections. ### Remember Expose only the intended service to the DMZ, not broad access to the internal network.