Which of the following is the BEST solution for the security analyst to implement?

While analyzing network traffic, a security analyst discovers several computers on the network are connecting to a malicious domain that was blocked by a DNS sinkhole. A new private IP range is now visible, but no change requests were made to add it.

Which of the following is the BEST solution for the security analyst to implement?
A . Block the domain IP at the firewall.
B . Blacklist the new subnet
C . Create an IPS rule.
D . Apply network access control.

View Answer

Answer: A