Fill the blank. IT is Best Practice to have a ________ rule at the end of each policy layer.

An Explicit Drop rule is a manually created rule placed at the end of a policy layer that drops all traffic not matched by prior rules and generates a log entry. Unlike implied or implicit drops, the explicit rule provides full logging and auditing visibility, which is critical for security monitoring and compliance.

Implied Drop is a system-level behavior, not a best-practice rule an administrator places manually; it also does not generate logs by default.

'Explicit Cleanup' is not a standard Check Point rule type; the correct terminology for this best-practice rule is Explicit Drop.

Implicit Drop and Implied Drop refer to the same system default behavior that silently drops unmatched traffic without logging, which is why it is not recommended as a substitute for an explicit rule.