GAQM
CPEH-001 · Question #52
You are monitoring the network of your organizations. You notice that: There are huge outbound connections from your Internal Network to External IPs On further investigation, you see that the…
The correct answer is D. Both B and C. See the full explanation below for the reasoning.
Question
You are monitoring the network of your organizations. You notice that:
There are huge outbound connections from your Internal Network to External IPs On further investigation, you see that the external IPs are blacklisted Some connections are accepted, and some are dropped You find that it is a CnC communication Which of the following solution will you suggest?
Options
- ABlock the Blacklist IP's @ Firewall
- BUpdate the Latest Signatures on your IDS/IPS
- CClean the Malware which are trying to Communicate with the External Blacklist IP's
- DBoth B and C
How the community answered
(44 responses)- A5% (2)
- B2% (1)
- C14% (6)
- D80% (35)
Community Discussion
No community discussion yet for this question.