PCNSE Question #307: Real Exam Question with Answer & Explanation

Question

A system administrator runs a port scan using the company tool as part of vulnerability check. The administrator finds that the scan is identified as a threat and is dropped by the firewall. After further investigating the logs, the administrator finds that the scan is dropped in the Threat Logs. What should the administrator do to allow the tool to scan through the firewall?

Options

• ARemove the Zone Protection profile from the zone setting.
• BAdd the tool IP address to the reconnaissance protection source address exclusion in the Zone
• CAdd the tool IP address to the reconnaissance protection source address exclusion in the DoS
• DChange the TCP port scan action from Block to Alert in the Zone Protection profile.