A security analyst suspects a malware infection was caused by a user who downloaded malware after clicking http://<malwaresource>/A.php in a phishing email.

A security analyst suspects a malware infection was caused by a user who downloaded malware after clicking http://<malwaresource>/A.php in a phishing email.

To prevent other computers from being infected by the same malware variation, the analyst should create a rule on the.

A. email server that automatically deletes attached executables.

B. IDS to match the malware sample.

C. proxy to block all connections to <malwaresource>.

D. firewall to block connection attempts to dynamic DNS hosts.

View Answer

Answer: C