Cisco Exam 300-215 Topic 8 Question 83 Discussion

Actual exam question for Cisco's 300-215 exam

Question #: 83
Topic #: 8

[All 300-215 Questions]

Refer to the exhibit.

Which two actions should be taken based on the intelligence information? (Choose two.)

ABlock network access to all .shop domains

BAdd a SIEM rule to alert on connections to identified domains.

CUse the DNS server to block hole all .shop requests.

DBlock network access to identified domains.

ERoute traffic from identified domains to block hole.

Show Suggested Answer

Suggested Answer: B, D

by Kaycee at Aug 24, 2024, 01:03 PM

Limited Time Offer

25%

Off

Get Premium 300-215 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Louis

9 months ago

Hold up, did someone say 'block hole'? I thought we were trying to _avoid_ creating black holes in the network. Sounds like a job for the IT Avengers if you ask me.

upvoted 0 times

...

Rueben

9 months ago

I'm torn between B and E. Blocking the domains is a solid move, but routing the traffic to a block hole could be a more elegant solution. Gotta be careful with that DNS server, though.

upvoted 0 times

Veda

8 months ago

True, routing traffic from identified domains to a block hole could be a more strategic approach to handle the situation.

upvoted 0 times

...

Renato

8 months ago

Blocking network access to identified domains could also be effective in preventing any potential threats.

upvoted 0 times

...

Tamekia

8 months ago

I think adding a SIEM rule to alert on connections to identified domains is a good first step.

upvoted 0 times

...

Cheryl

9 months ago

You know, I was just thinking the same thing! Block the identified domains and set up an alert rule to keep an eye on things. Can't be too careful with this kind of intelligence.

upvoted 0 times

Rebbecca

9 months ago

Setting up an alert rule is a good idea to monitor any connections to those domains.

upvoted 0 times

...

Rebecka

9 months ago

Definitely, blocking the identified domains is crucial for security.

upvoted 0 times

...

Glendora

9 months ago

I believe using the DNS server to block all .shop requests could also be effective in preventing any potential threats.

upvoted 0 times

...

Chau

9 months ago

I think adding a SIEM rule to alert on connections to identified domains is also important.

upvoted 0 times

...

Hyun

10 months ago

I agree with Margret, blocking network access seems like the best option.

upvoted 0 times

...

Margret

10 months ago

I think we should block network access to identified domains.

upvoted 0 times

...

Leonora

10 months ago

Hmm, I think B and D are the way to go. Blocking all .shop domains seems a bit overkill, and using the DNS server could have some unintended consequences.

upvoted 0 times

Maurine

9 months ago

Using the DNS server could definitely cause some issues.

upvoted 0 times

...

Chantell

9 months ago

Blocking all .shop domains does seem a bit extreme.

upvoted 0 times

...

Kendra

10 months ago

I agree, B and D are the best options here.

upvoted 0 times

...