GAQM
CPEH-001 · Question #807
The network team has well-established procedures to follow for creating new rules on the firewall. This includes having approval from a manager prior to implementing any new rules. While reviewing…
The correct answer is D. Immediately roll back the firewall rule until a manager can approve it. See the full explanation below for the reasoning.
Question
The network team has well-established procedures to follow for creating new rules on the firewall. This includes having approval from a manager prior to implementing any new rules. While reviewing the firewall configuration, you notice a recently implemented rule but cannot locate manager approval for it. What would be a good step to have in the procedures for a situation like this?
Options
- AHave the network team document the reason why the rule was implemented without prior
- BMonitor all traffic using the firewall rule until a manager can approve it.
- CDo not roll back the firewall rule as the business may be relying upon it, but try to get manager
- DImmediately roll back the firewall rule until a manager can approve it
How the community answered
(49 responses)- A4% (2)
- B14% (7)
- C8% (4)
- D73% (36)
Community Discussion
No community discussion yet for this question.