Which of the following should the security analyst request NEXT based on the UTM firewall analysis?

The application team within a company is asking the security team to investigate why its application is slow after an upgrade. The source of the team’s application is 10.13.136.9. and the destination IP is 10.17.36.5. The security analyst pulls the logs from the endpoint security software but sees nothing is being blocked.

The analyst then looks at the UTM firewall logs and sees the following:

Which of the following should the security analyst request NEXT based on the UTM firewall analysis?
A . Request the application team to allow TCP port 87 to listen on 10.17.36.5.
B . Request the network team to open port 1433 from 10.13.136.9 to 10.17.36.5.
C . Request the network team to turn of IPS for 10.13.136.8 going to 10.17.36.5.
D . Request the application team to reconfigure the application and allow RPC communication.

View Answer

Answer: B