Câu 34: CA1-005: CompTIA SecurityX

A security architect is onboarding a new EDR agent on servers that traditionally do not have internet access. In order for the agent to receive updates and report back to the management console, some changes must be made. Which of the following should the architect do to best accomplish this requirement? (Choose two.)

1. A. Create a firewall rule to only allow traffic from the subnet to the internet via a proxy. — đáp án hiện tại
2. B. Configure a proxy policy that blocks all traffic on port 443.
3. C. Configure a proxy policy that allows only fully qualified domain names needed to communicate to a portal. — đáp án hiện tại
4. D. Create a firewall rule to only allow traffic from the subnet to the internet via port 443.
5. E. Create a firewall rule to only allow traffic from the subnet to the internet to fully qualified names that are not identified as malicious by the firewall vendor.
6. F. Configure a proxy policy that blocks only lists of known-bad, fully qualified domain names.