Exam 350-701 topic 1 question 342 discussion

A. Create a destination list for addresses to be allowed or blocked

https://docs.umbrella.com/managed-services/docs/msc-new-configure-destination-lists A destination list is a list of internet requests (for example, a domain name) that is used to manage—block or allow—org access to specific internet destinations.

A destination list is a list of internet destinations that can be blocked or allowed based on the administrative preferences for the policies applied to the identities within your organization. A destination is a URL or fully qualified domain name. You can add a destination list to Umbrella at any time; however, a destination list does not come into use until it is added to a policy. https://docs.umbrella.com/deployment-umbrella/docs/working-with-destination-lists

Choosing A would duplicate the thing, as it stated the policy is already created to block addresses?

C make no sense, cause umbrella is used to enforce policies on identities not vice versa: https://docs.umbrella.com/umbrella-user-guide/docs/manage-identities Manage Identities An identity is an internet capable entity that Umbrella protects through policies and monitors through reports. An identity can be a high-level entity within your system—for example, a network—or very granular—for example, a single user logged into Active Directory. To protect your systems, you add identities to Umbrella, then create policies to which you add these identities. For more information about policies, see Manage DNS Policies and Manage the Web Policy.

block specific addresses > using < Cisco Umbrella I don't see block destination IP's being questioned.

The question states, the policy is already created and actively used by devices. I

The answer is A. C cannot be correct, because it talks about identities, not destination.

Not confuse "identities list" with "destination list"

I prefer A

https://docs.umbrella.com/deployment-umbrella/docs/working-with-destination-lists

Must b A then.

This is WRONG. Identity list is uset to identify lets say your organisation. For example your organisation has IP of 108.2.3.100. You add this IP to Identity list ( ad a name for ex: CORP) and bind the policy to this Identity. In the policy that is assigned to this Identity ( Corp of address 108.2.3.100) you then configure destination list with Block/allow action.