HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains 25
servers. All servers run Windows Server 2012 R2.
You need to create a Windows Firewall rule to prevent administrators from using Internet Explorer
to access the Internet while they are logged on interactively to the servers. The solution must not
prevent administrators from accessing websites on the internal network.
How should you configure the rule?
To answer, select the appropriate options in the answer area.
Answer: 
Explanation:
If you block the program, won’t that block them from the internal websites as well?
No, that is why you set the rule direction to “Outbound”
Actually, when you create the rule you are able to define in the rule the scope and in the scope you can define that the rule does not apply to the local subnets.