After Network Containing a host, your Incident Response team states they are unable to remotely connect to the host. Which of the following would need to be configured to allow remote connections from

The correct answer is D. IP Allowlist Management. The option that would need to be configured to allow remote connections from specified IP's after network containing a host is IP Allowlist Management. IP Allowlist Management allows you to define a list of trusted IP addresses that can communicate with your contained hosts. This

Response and Containment

Question

After Network Containing a host, your Incident Response team states they are unable to remotely connect to the host. Which of the following would need to be configured to allow remote connections from specified IP's?

Options

AResponse Policy
BContainment Policy
CMaintenance Token
DIP Allowlist Management

How the community answered

(31 responses)

A
6% (2)
B
3% (1)
C
13% (4)
D
77% (24)

Explanation

The option that would need to be configured to allow remote connections from specified IP's after network containing a host is IP Allowlist Management. IP Allowlist Management allows you to define a list of trusted IP addresses that can communicate with your contained hosts. This way, you can isolate a host from the network while still allowing your incident response team or other authorized parties to remotely connect to the host for investigation or remediation purposes.

Topics

#network containment#IP allowlist#containment policy#remote access

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice