You are required to design a university network to meet the conditions shown below.
Users connected to the university network should be able to access the Internet and the research department lab network. The research department lab network should not be able to reach the Internet.
Which three actions satisfy the design requirements? (Choose three.)
A. Use a global permit policy for Internet traffic
B. Use a global deny security policy for the research lab
C. Use separate security zones for each department
D. Use the default deny security policy for the research lab
E. Use a static NAT rule between the internal zones for the research lab