210-260 · Question #8
You have implemented a Sourcefire IPS and configured it to block certain addresses utilizing Security Intelligence IP address Reputation. A user calls and is not able to access a certain IP address…
The correct answer is B. Create a whitelist and add the appropriate IP address to allow traffic. When a blacklist is too broad in scope, or incorrectly blocks traffic that you want to allow (for example, to vital resources), you can override a blacklist with a custom whitelist. System-UserGuide-v5401/AC-Secint-Blacklisting.html
Question
You have implemented a Sourcefire IPS and configured it to block certain addresses utilizing Security Intelligence IP address Reputation. A user calls and is not able to access a certain IP address. What action can you take to allow the user access to the IP address?
Options
- ACreate a custom blacklist to allow traffic
- BCreate a whitelist and add the appropriate IP address to allow traffic.
- CCreate a user based access control rule to allo the traffic.
- DCreate a network based access control rule to allow the traffic.
- ECreate a rule to bypass inspection to allow the traffic
How the community answered
(59 responses)- A7% (4)
- B73% (43)
- C15% (9)
- D3% (2)
- E2% (1)
Explanation
When a blacklist is too broad in scope, or incorrectly blocks traffic that you want to allow (for example, to vital resources), you can override a blacklist with a custom whitelist. System-UserGuide-v5401/AC-Secint-Blacklisting.html
Topics
Community Discussion
No community discussion yet for this question.