A firewall permits only required inbound services and denies unmatched connections. Which approach is illustrated?

1. Default deny
2. Split tunneling
3. Default allow
4. Passive observation