SY0-701 · Question #142
During a security incident, the security operations team identified sustained network traffic from a malicious IP address: 10.1.4.9. A security analyst is creating an inbound firewall rule to block…
The correct answer is B. access-list inbound deny ip source 10.1.4.9/32 destination 0.0.0.0/0. /32 would cover all possible subnets, & their communicating devices within the IP range, & destination 0.0.0.0/0 would cover the gateway surface of your network.
Question
During a security incident, the security operations team identified sustained network traffic from a malicious IP address: 10.1.4.9. A security analyst is creating an inbound firewall rule to block the IP address from accessing the organization's network. Which of the following fulfills this request?
Options
- Aaccess-list inbound deny ip source 0.0.0.0/0 destination 10.1.4.9/32
- Baccess-list inbound deny ip source 10.1.4.9/32 destination 0.0.0.0/0
- Caccess-list inbound permit ip source 10.1.4.9/32 destination 0.0.0.0/0
- Daccess-list inbound permit ip source 0.0.0.0/0 destination 10.1.4.9/32
How the community answered
(55 responses)- A15% (8)
- B76% (42)
- C7% (4)
- D2% (1)
Explanation
/32 would cover all possible subnets, & their communicating devices within the IP range, & destination 0.0.0.0/0 would cover the gateway surface of your network.
Community Discussion
No community discussion yet for this question.