You know, if the question was about how to handle traffic that's not allowed by the security policy, I'd say the answer is 'run and hide.' But since it's allowed traffic, D) allow is the way to go.
D) allow is the way to go. I mean, who wants to be the one to explain to the boss why we're blocking traffic that's supposed to be allowed? That's a career-limiting move, my friend.
I'm gonna go with D) allow. Blocking or alerting on traffic that's already approved by the policy doesn't make much sense. Gotta keep things simple, right?
If the traffic is allowed by the security policy, then the recommended action should be D) allow. Blocking or sinkholing would be overkill in this case.
Cheryl
1 months agoLorrie
15 days agoLemuel
18 days agoRefugia
27 days agoHester
28 days agoBritt
2 months agoMagda
2 months agoRuby
8 days agoWerner
10 days agoMozelle
13 days agoLeontine
2 months agoElin
7 days agoHerschel
8 days agoJuan
9 days agoNu
10 days agoMatthew
11 days agoDeane
13 days agoGeraldo
26 days agoLong
28 days agoJanine
2 months agoGerald
2 months agoLatrice
2 months agoCatalina
3 months agoAlexis
3 months agoBelen
3 months ago