An Organization Identifies a Number of Hosts Making Outbound Connections

question 449

Multiple Choice

An organization identifies a number of hosts making outbound connections to a known malicious IP over port TCP 80. The organization wants to identify the data being transmitted and prevent future connections to this IP. Which of the following should the organization do to achieve this outcome?

• A) Use a protocol analyzer to reconstruct the data and implement a web-proxy.
• B) Deploy a web-proxy and then blacklist the IP on the firewall.
• C) Deploy a web-proxy and implement IPS at the network edge.
• D) Use a protocol analyzer to reconstruct the data and blacklist the IP on the firewall.

---

Definitions:

Information

A set of data or details about a particular subject, often processed to be useful.

Understanding

The ability to comprehend or grasp the meaning, nature, or importance of something.

Highly-Valued

Something considered to be of great importance or worth.

Management Skill

The ability to plan, organize, direct, and control individuals or groups of people to achieve specific goals.