A security rule is stateless. What must the network design explicitly account for?

1. Budget notifications acting as connection tracking.
2. DNS creating reverse security rules.
3. The required return traffic rules.
4. Automatic response permission for every flow regardless of rules.