You created a Real-time Protection policy that blocks all activities to non-corporate S3 buckets, but determine that the policy is too restrictive. Specifically, users are complaining that normal websites have stopped rendering properly.
How would you solve this problem?
23 comments · newest first
AL
Alpha
10 months ago
Why are we even blocking S3 in the first place? Seems excessive.
EM
Emogene
11 months ago
Option A could work too, but not sure if it's enough.
WE
Weldon
11 months ago
Wait, are we sure this won't compromise security?
MI
Michael
11 months ago
Totally agree, we need broader access!
TE
Tenesha
11 months ago
I think option B makes the most sense.
GI
Gilma
12 months ago
I feel like allowing Browse activity to the Amazon S3 application could be the right move, but I’m not completely confident about it.
AV
Avery
12 months ago
I practiced a similar question, and I think we should focus on allowing the Download activity for Amazon S3 specifically. That might be more targeted.
LI
Lili
12 months ago
I'm not entirely sure, but I think allowing Browse activity to the Cloud Storage category might help users access those websites again.
MA
Malinda
1 year ago
I remember we discussed how blocking all non-corporate S3 buckets could lead to issues with normal web browsing. Maybe we need to allow some specific activities?
AL
Allene
1 year ago
Based on the information provided, I think option A is the most targeted solution. Allowing the Browse activity specifically to the Amazon S3 application should address the issue without being overly permissive.
HO
Holley
1 year ago
I'm a bit confused on the difference between the Amazon S3 application and the Cloud Storage category. I'll need to double-check the details to make sure I select the right option.
ST
Stacey
1 year ago
I'm pretty confident that option B is the way to go here. Allowing the Browse activity to the Cloud Storage category should resolve the website rendering problem without being too broad.
FE
Fernanda
1 year ago
Okay, let's see here. I think the key is to figure out what's causing the issue with the websites not rendering properly. That should help guide the right solution.
EV
Eva
1 year ago
Hmm, this seems like a tricky one. I'll need to carefully review the options and think through the implications of each approach.
MA
Malcolm
1 year ago
This question seems straightforward, I think I can handle it.
RE
Ressie
1 year ago
This question seems similar to a practice question we did on installment sales and estate considerations. I think both statements could be true, but I'm not fully confident.
PE
Peter
1 year ago
Hmm, this question seems pretty complex. I'll need to carefully review the details about the binomial model and the BSM assumptions to make sure I understand them fully before attempting to solve this.
BA
Barb
2 years ago
I'd say B is better; it's less restrictive and solves rendering issues.
MI
Mica
2 years ago
True, but do users need just browse access or download too?
LA
Lang
2 years ago
But doesn't B sound more comprehensive? It covers the entire Cloud Storage category.
PA
Paris
2 years ago
I'm thinking option A. Allowing Browse activity to Amazon S3 might fix the issue.
BA
Barb
2 years ago
Yeah, it's a tricky one. It's about the Real-time Protection policy.
MI
Mica
2 years ago
I can't believe this question in the exam.