Q1
Single choice
.
The firewall must log the traffic logs that pass, but there can be no records for the rejected traffic.