An Engineer Receives an Incident Ticket with Hundreds of Intrusion

question 88

Multiple Choice

An engineer receives an incident ticket with hundreds of intrusion alerts that require investigation. An analysis of the incident log shows that the alerts are from trusted IP addresses and internal devices. The final incident report stated that these alerts were false positives and that no intrusions were detected. What action should be taken to harden the network?

• A) Move the IPS to after the firewall facing the internal network
• B) Move the IPS to before the firewall facing the outside network
• C) Configure the proxy service on the IPS
• D) Configure reverse port forwarding on the IPS

---

Definitions:

Government Affairs

Activities and policies related to the governance and administration of a state or organization.

Financial Interest

A stake or concern in financial investments or decisions, often implying that the outcome could affect one's personal or organizational wealth.

Syndication Rules

Regulations or practices concerning the distribution and licensing of media content to be broadcast across different stations or platforms, often to reach a wider audience.

Sensitive Information

Data that must be protected due to its confidentiality or potential impact on privacy and security if disclosed.