Exam SY0-601 topic 1 question 492 discussion

Actual exam question from CompTIA's SY0-601

Question #: 492
Topic #: 1

During a security incident, the security operations team identified sustained network traffic from a malicious IP address: 10.1.4.9. A security analyst is creating an inbound firewall rule to block the IP address from accessing the organization's network. Which of the following fulfills this request?

A. access-list inbound deny ip source 0.0.0.0/0 destination 10.1.4.9/32
B. access-list inbound deny ip source 10.1.4.9/32 destination 0.0.0.0/0
C. access-list inbound permit ip source 10.1.4.9/32 destination 0.0.0.0/0
D. access-list inbound permit ip source 0.0.0.0/0 destination 10.1.4.9/32

Show Suggested Answer

Suggested Answer: B 🗳️

by CastratedMonk at July 5, 2023, 9:19 a.m.

Comments

Submit Cancel

ApplebeesWaiter1122

Highly Voted 1 year, 11 months ago

Selected Answer: B

The correct firewall rule to block the malicious IP address 10.1.4.9 from accessing the organization's network is: B. access-list inbound deny ip source 10.1.4.9/32 destination 0.0.0.0/0 In this rule, the source IP address 10.1.4.9 is denied access to any destination IP address (0.0.0.0/0) in the organization's network. This effectively blocks the malicious IP address from accessing any resources within the network.

upvoted 11 times

...