Which of the following is a fundamental principle of firewall & ids/ips tuning as it applies to Certified Cyber Professional?