SCS-C02 · Question #334
There are currently multiple applications hosted in a VPC. During monitoring it has been noticed that multiple port scans are coming in from a specific IP Address block. The internal security team has
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #334. The question stem and answer options stay visible for context.
Question
There are currently multiple applications hosted in a VPC. During monitoring it has been noticed that multiple port scans are coming in from a specific IP Address block. The internal security team has requested that all offending IP Addresses be denied for the next 24 hours. Which of the following is the best method to quickly and temporarily deny access from the specified IP Address's?
Options
- ACreate an AD policy to modify the Windows Firewall settings on all hosts in the VPC to deny
- BModify the Network ACLs associated with all public subnets in the VPC to deny access from the
- CAdd a rule to all of the VPC Security Groups to deny access from the IP Address block.
- DModify the Windows Firewall settings on all AMI'S that your organization uses in that VPC to deny
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.