Eccouncil 312-50 Exam - Topic 1 Question 114 Discussion

Actual exam question for Eccouncil's 312-50 exam

Question #: 114
Topic #: 1

The network team has well-established procedures to follow for creating new rules on the firewall. This includes having approval from a manager prior to implementing any new rules. While reviewing the firewall configuration, you notice a recently implemented rule but cannot locate manager approval for it. What would be a good step to have in the procedures for a situation like this?

AHave the network team document the reason why the rule was implemented without prior manager approval.

BMonitor all traffic using the firewall rule until a manager can approve it.

CDo not roll back the firewall rule as the business may be relying upon it, but try to get manager approval as soon as possible.

DImmediately roll back the firewall rule until a manager can approve it

Show Suggested Answer

Suggested Answer: D

by Katlyn at Nov 21, 2025, 12:30 AM

Limited Time Offer

25%

Off

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ashton

3 days ago

A documentation step is crucial, so A could work too.

upvoted 0 times

...

Merrilee

8 days ago

But what if the rule is a security risk? Shouldn't we roll it back?

upvoted 0 times

...

Sanjuana

13 days ago

Definitely agree with C. Rolling back could cause issues.

upvoted 0 times

...

Tawna

18 days ago

I think option C makes the most sense. Don't want to disrupt business.

upvoted 0 times

...

Raylene

24 days ago

Option C is just asking for a security breach. Gotta get that manager approval ASAP.

upvoted 0 times

...

Candra

29 days ago

Haha, I bet the network team is sweating bullets over this one. Gotta love those unexpected firewall surprises!

upvoted 0 times

...

Trevor

1 month ago

I agree, rolling it back is the safest bet. Better to be safe than sorry when it comes to firewall rules.

upvoted 0 times

...

Sherrell

1 month ago

I lean towards option D because it seems like the safest choice, but I worry about the potential impact on the network.

upvoted 0 times

...

Kiley

1 month ago

I think we had a practice question about monitoring traffic in a similar situation. It seems safer to keep an eye on it until we get approval.

upvoted 0 times

...

Denise

2 months ago

I'm a little torn on this one. On one hand, we don't want to disrupt the business, but on the other, we have to follow the established procedures. I think I'd lean towards option C - try to get the approval quickly, but don't roll it back in the meantime.

upvoted 0 times

...

Lashanda

2 months ago

This seems straightforward to me. The procedures are clear - we need manager approval before implementing any new rules. Option D is the way to go - roll it back immediately and get that approval before putting it back in place.

upvoted 0 times

...

Jospeh

2 months ago

Okay, I think I've got a handle on this. The key here is to balance the need for proper approval with the potential business impact. I'd say option C is the way to go - document the reason, but don't roll it back until we can get that manager sign-off.

upvoted 0 times

...

Ernestine

2 months ago

I remember we discussed the importance of documenting changes, but I'm not sure if that should be the first step here.

upvoted 0 times

...

Juan

3 months ago

Option D is the way to go. Can't have unapproved firewall rules, that's just asking for trouble.

upvoted 0 times

...

Tonette

3 months ago

Surprised there's a rule without approval! How did that happen?

upvoted 0 times

...

Christa

3 months ago

Rolling back the rule might be risky if the business is using it. I feel like option C could be a good compromise, but I'm not entirely confident.

upvoted 0 times

...

Amie

3 months ago

Hmm, this is a tricky one. I think option C might be the best approach - we don't want to disrupt any critical business processes, but we definitely need to get that manager approval as soon as possible.

upvoted 0 times

...

Francis

3 months ago

I'm a bit confused by this question. It seems like there could be a few different approaches, but I'm not sure which one would be the best step to take.

upvoted 0 times

Ashton

2 months ago

I think monitoring the traffic is a safe bet.

upvoted 0 times

...