A security architect is onboarding a new EDR agent on servers that traditionally do not have internet access. In order for the agent to receive updates and report back to the management console…

Question

Options

• ACreate a firewall rule to only allow traffic from the subnet to the internet via a proxy.
• BConfigure a proxy policy that blocks all traffic on port 443.
• CConfigure a proxy policy that allows only fully qualified domain names needed to communicate to
• DCreate a firewall rule to only allow traffic from the subnet to the internet via port 443.
• ECreate a firewall rule to only allow traffic from the subnet to the internet to fully qualified names
• FConfigure a proxy policy that blocks only lists of known-bad, fully qualified domain names.

• A
  71% (24)
• B
  15% (5)
• D
  3% (1)
• E
  3% (1)
• F
  9% (3)

Explanation

Create a firewall rule to only allow traffic from the subnet to the internet via a proxy ensures that the servers can connect to the internet through a controlled channel, allowing the EDR agent to get updates and report back securely. Configure a proxy policy that allows only fully qualified domain names needed to communicate to a portal ensures that the agent can reach only the necessary services for updates and reporting, minimizing exposure and enhancing security by limiting access to only trusted domains.

No community discussion yet for this question.