Exam4Training

Which of the following solution will you suggest?

You are monitoring the network of your organizations.

You notice that:

– There are huge outbound connections from your Internal Network to External IPs.

– On further investigation, you see that the External IPs are blacklisted.

– Some connections are accepted, and some are dropped.

– You find that it is a CnC communication.

Which of the following solution will you suggest?
A . Block the Blacklist lP’s @ Firewall
B . Update the Latest Signatures on your IDS/IPS
C . Clean the Malware which are trying to Communicate with the External Blacklist IP’s
D . Block the Blacklist IP’s @ Firewall as well as Clean the Malware which are trying to Communicate with the External Blacklist IP’s.

Answer: D

Exit mobile version