N10-009 · Question #501
After a recent security awareness phishing campaign, the cybersecurity team discovers that additional security measures need to be set up when users access potentially malicious websites. Which of…
The correct answer is A. Implement DNS filtering. DNS filtering blocks access to malicious domains by preventing DNS resolution of known bad sites, protecting users from phishing and malware even if they click on harmful links. Updating ACLs to allow only HTTPS doesn't stop access to malicious HTTPS sites. IPS (Intrusion…
Question
After a recent security awareness phishing campaign, the cybersecurity team discovers that additional security measures need to be set up when users access potentially malicious websites. Which of the following security measures will best address this concern?
Options
- AImplement DNS filtering.
- BUpdate ACLs to only allow HTTPS.
- CConfigure new IPS hardware.
- DDeploy 802.1X security features.
How the community answered
(28 responses)- A71% (20)
- B7% (2)
- C18% (5)
- D4% (1)
Explanation
DNS filtering blocks access to malicious domains by preventing DNS resolution of known bad sites, protecting users from phishing and malware even if they click on harmful links. Updating ACLs to allow only HTTPS doesn't stop access to malicious HTTPS sites. IPS (Intrusion Prevention System) helps with network-level threats but may not directly prevent users from resolving or visiting phishing domains. 802.1X controls network access at the port level, not web traffic or DNS-level filtering. DNS filtering is the most effective and targeted measure to prevent access to malicious websites.
Community Discussion
No community discussion yet for this question.