A user reports application access issues to the help desk. The help desk reviews the logs for the user: Which of the following is most likely the reason for the issue?

The correct answer is A. The user inadvertently tripped the geoblock rule in NGFW. The logs show that the user connected from Toronto (104.18.16.29) and Los Angeles (95.67.137.12) within minutes. The sudden location change is a typical trigger for geoblocking in a Next-Generation Firewall (NGFW), leading to the HR System being denied.

Submitted by emma.c· Mar 6, 2026Security Operations

Question

A user reports application access issues to the help desk. The help desk reviews the logs for the user:

Which of the following is most likely the reason for the issue?

Exhibits

Options

AThe user inadvertently tripped the geoblock rule in NGFW.
BA threat actor has compromised the user's account and attempted to log in.
CThe user is not allowed to access the human resources system outside of business hours.
DThe user did not attempt to connect from an approved subnet.

How the community answered

(55 responses)

A
75% (41)
B
7% (4)
C
4% (2)
D
15% (8)

Explanation

The logs show that the user connected from Toronto (104.18.16.29) and Los Angeles (95.67.137.12) within minutes. The sudden location change is a typical trigger for geoblocking in a Next-Generation Firewall (NGFW), leading to the HR System being denied.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice