A security analyst uses Use Case Manager Active Rules and detects which TOP rule- generating offenses are triggered due to inbound traffic that is dropped by the firewall. The company decides that the rule should only trigger only when there are firewall permit events. Which of these does the analyst implement to meet the above requirement?

Question

A security analyst uses Use Case Manager > Active Rules and detects which TOP rule- generating offenses are triggered due to inbound traffic that is dropped by the firewall. The company decides that the rule should only trigger only when there are firewall permit events. Which of these does the analyst implement to meet the above requirement?

Accepted Answer

B. Open Rule Wizard add a test condition > and when an event matches any of the following

Answer

A. Open Rule Wizard add a test condition > and when the context is Local to Local, Local to Remote

Answer

C. Open Rule Wizard add a test condition > and NOT when an event matches any of the following

Answer

D. Open Rule Wizard add a test condition > and when the event category for the event is one of the

A security analyst uses Use Case Manager > Active Rules and detects which TOP rule- generating offenses are triggered due to inbound traffic that is dropped by the firewall. The company decides that…

Question

Options

How the community answered

Community Discussion