Exam CAS-004 topic 1 question 422 discussion

B. The only answer hits all requirements

A. Integrate threat intelligence feeds into the FIM. Here's why: Integrating threat intelligence feeds into the FIM (Federated Identity Manager) can help limit the attack surface by providing real-time information about known threats. This allows the FIM to make informed decisions about access control and can help prevent unauthorized access. Updating firewall rules and configuring SIEM dashboards are important security measures, but they don't directly address the goal of limiting the attack surface and improving access control for external and internal network security. Deploying DLP rules is relevant for data protection, but it doesn't specifically address the goal of limiting the attack surface and improving access control. Therefore, integrating threat intelligence feeds into the FIM is the most effective solution for achieving the stated requirements.

Updating firewall rules to ensure they match the new IP addresses in use is crucial for maintaining effective access control. This action helps to limit the attack surface by ensuring that only authorized traffic is allowed through the firewall. Properly configured firewall rules can improve internal and external network security and reduce congestion by blocking unwanted or malicious traffic, thereby improving overall network performance.

The best answer is B. Update firewall rules to match new IP addresses in use. Updating firewall rules to match new IP addresses helps to limit the attack surface by only allowing traffic from known, trusted IPs. It also improves access control for both external and internal network security and can enhance performance by reducing unnecessary or unauthorized network traffic.

B. Update firewall rules to match new IP addresses in use. By updating firewall rules to match the new IP addresses in use, the security administrator can limit the attack surface and improve access control for external and internal network security. This will also help improve performance by reducing congestion on network traffic.