Discuss Cisco 300-215 Exam Topic 8 Question 83

Refer to the exhibit.

Which two actions should be taken based on the intelligence information? (Choose two.)

ABlock network access to all .shop domains

BAdd a SIEM rule to alert on connections to identified domains.

CUse the DNS server to block hole all .shop requests.

DBlock network access to identified domains.

ERoute traffic from identified domains to block hole.

Suggested Answer: B, D

Get Premium 300-215 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

31 comments · newest first

Lucy 11 months ago

Wait, are we sure blocking .shop is the right move?

Dong 11 months ago

C sounds like a solid plan too, but is it really necessary?

Fannie 11 months ago

Blocking all .shop domains seems extreme, though.

Jenelle 11 months ago

Totally agree with B, we need those alerts!

Herschel 12 months ago

I think B and D are the best options here.

Lauran 12 months ago

I'm leaning towards blocking network access to the identified domains, but I wonder if routing traffic to a block hole would be more effective in this case.

Jarod 1 year ago

I feel like using the DNS server to block requests could be effective, but I can't recall if that's the best approach for this scenario.

Krissy 1 year ago

I think adding a SIEM rule is definitely a good move. We practiced similar questions where monitoring was key.

Marjory 1 year ago

I remember we discussed blocking specific domains in class, but I'm not sure if we should block all .shop domains or just the identified ones.

Louisa 1 year ago

Routing traffic to a block hole seems like it could be effective, but I want to make sure that won't cause any unintended consequences for our network.

Dean 1 year ago

I'm a bit confused by the difference between blocking network access and using the DNS server to block. I'll need to make sure I understand the technical details before deciding.

Clay 1 year ago

Okay, let's see here. Blocking all .shop domains seems a bit heavy-handed, but adding a SIEM rule to monitor those connections could be a good first step.

Jessenia 1 year ago

Hmm, this looks like a tricky one. I'll need to carefully review the options and think through the potential implications of each action.

Carlene 1 year ago

I think the key here is to balance security measures with maintaining business operations. A combination of monitoring and targeted blocking might be the best approach.

Germaine 1 year ago

I'm a little confused by the wording of this question. What exactly do they mean by "historic price movements"? I'll have to read it over again carefully.

Louis 2 years ago

Hold up, did someone say 'block hole'? I thought we were trying to _avoid_ creating black holes in the network. Sounds like a job for the IT Avengers if you ask me.

Rueben 2 years ago

I'm torn between B and E. Blocking the domains is a solid move, but routing the traffic to a block hole could be a more elegant solution. Gotta be careful with that DNS server, though.

Veda 2 years ago

↳ replying to Rueben

True, routing traffic from identified domains to a block hole could be a more strategic approach to handle the situation.

Renato 2 years ago

↳ replying to Rueben

Blocking network access to identified domains could also be effective in preventing any potential threats.

Tamekia 2 years ago

↳ replying to Rueben

I think adding a SIEM rule to alert on connections to identified domains is a good first step.

Cheryl 2 years ago

You know, I was just thinking the same thing! Block the identified domains and set up an alert rule to keep an eye on things. Can't be too careful with this kind of intelligence.

Rebbecca 2 years ago

↳ replying to Cheryl

Setting up an alert rule is a good idea to monitor any connections to those domains.

Rebecka 2 years ago

↳ replying to Cheryl

Definitely, blocking the identified domains is crucial for security.

Glendora 2 years ago

I believe using the DNS server to block all .shop requests could also be effective in preventing any potential threats.

Chau 2 years ago

I think adding a SIEM rule to alert on connections to identified domains is also important.

Hyun 2 years ago

I agree with Margret, blocking network access seems like the best option.

Margret 2 years ago

I think we should block network access to identified domains.

Leonora 2 years ago

Hmm, I think B and D are the way to go. Blocking all .shop domains seems a bit overkill, and using the DNS server could have some unintended consequences.

Maurine 2 years ago

↳ replying to Leonora

Using the DNS server could definitely cause some issues.

Chantell 2 years ago

↳ replying to Leonora

Blocking all .shop domains does seem a bit extreme.

Kendra 2 years ago

↳ replying to Leonora

I agree, B and D are the best options here.

Cisco 300-215 Exam - Topic 8 Question 83 Discussion