Cisco Exam 300-215 Topic 8 Question 83 Discussion

Actual exam question for Cisco's 300-215 exam

Question #: 83
Topic #: 8

[All 300-215 Questions]

Refer to the exhibit.

Which two actions should be taken based on the intelligence information? (Choose two.)

ABlock network access to all .shop domains

BAdd a SIEM rule to alert on connections to identified domains.

CUse the DNS server to block hole all .shop requests.

DBlock network access to identified domains.

ERoute traffic from identified domains to block hole.

Show Suggested Answer

Suggested Answer: B, D

by Kaycee at Aug 24, 2024, 01:03 PM

Limited Time Offer

25%

Off

Get Premium 300-215 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Louis

8 days ago

Hold up, did someone say 'block hole'? I thought we were trying to _avoid_ creating black holes in the network. Sounds like a job for the IT Avengers if you ask me.

upvoted 0 times

...

Rueben

13 days ago

I'm torn between B and E. Blocking the domains is a solid move, but routing the traffic to a block hole could be a more elegant solution. Gotta be careful with that DNS server, though.

upvoted 0 times

...

1 months ago

Hmm, I think B and D are the way to go. Blocking all .shop domains seems a bit overkill, and using the DNS server could have some unintended consequences.

upvoted 0 times

Maurine

17 days ago

Using the DNS server could definitely cause some issues.

upvoted 0 times

...

Chantell

26 days ago

Blocking all .shop domains does seem a bit extreme.

upvoted 0 times

...

Kendra

1 months ago

I agree, B and D are the best options here.

upvoted 0 times

...