A Company Wants to Implement a Cloud-Based Security Solution That

question 411

Multiple Choice

A company wants to implement a cloud-based security solution that will sinkhole malicious DNS requests. The security administrator has implemented technical controls to direct DNS requests to the cloud servers but wants to extend the solution to all managed and unmanaged endpoints that may have user-defined DNS manual settings. Which of the following should the security administrator implement to ensure the solution will protect all connected devices?

• A) Implement firewall ACLs as follows: PERMIT UDP ANY CLOUD_SERVER EQ 53 DENY UDP ANY ANY EQ 53
• B) Implement NAT as follows:
• C) Implement DHCP options as follows: DHCP DNS1: CLOUD_SERVER1 DHCP DNS2: CLOUD_SERVER2
• D) Implement policy routing as follows: 100 PERMIT UDP ANY ANY ANY 53 200 PERMIT UDP PAT_POOL ANY CLOUD_SERVER 53 IP ROUTE_MAP 200 200

---

Definitions:

Super-Ego

The strict and demanding part of the mind.

Ego

In psychoanalytic theory, it represents the part of the mind that mediates between the conscious and the unconscious and is responsible for reality testing and a sense of personal identity.

Unconscious Mind

Refers to the part of the mind that is not currently in focal awareness, containing thoughts, memories, and desires that are not readily accessible but influence behavior.

Pleasure Principle

A concept in psychoanalytic theory that describes the instinctual seeking of pleasure and avoiding of pain to satisfy biological and psychological needs.