A security analyst has discovered suspicious traffic and determined a host is connecting to a known malicious website.

A security analyst has discovered suspicious traffic and determined a host is connecting to a known malicious website.

The MOST appropriate action for the analyst to take would be lo implement a change request to:
A . update the antivirus software
B. configure the firewall to block traffic to the domain
C. add the domain to the blacklist
D. create an IPS signature for the domain

View Answer

Answer: B