CAS-005 Question #161: Real Exam Question with Answer & Explanation

Question

A security architect is onboarding a new EDR agent on servers that traditionally do not have internet access. In order for the agent to receive updates and report back to the management console, some changes must be made. Which of the following should the architect do to best accomplish this requirement? (Choose two.)

Options

• ACreate a firewall rule to only allow traffic from the subnet to the internet via a proxy.
• BConfigure a proxy policy that blocks all traffic on port 443.
• CConfigure a proxy policy that allows only fully qualified domain names needed to communicate to
• DCreate a firewall rule to only allow traffic from the subnet to the internet via port 443.
• ECreate a firewall rule to only allow traffic from the subnet to the internet to fully qualified names
• FConfigure a proxy policy that blocks only lists of known-bad, fully qualified domain names.