TRAINING Deny network communications traffic by default and allow network communications traffic by exception Guidance Guidance