CAS-005 Web TestEngine demo

A building camera is remotely accessed and disabled from the remote console application during off-hours. A security analyst reviews the following logs:

A security architect is onboarding a new EDR agent on servers that traditionally do not have internet access.
In order for the agent to receive updates and report back to the management console, some changes must be made.

Which of the following should the architect do to best accomplish this requirement? (Select two).

Select all that apply.

• A

  Create a firewall rule to only allow traffic from the subnet to the internet via a proxy.

• B

  Configure a proxy policy that blocks all traffic on port 443.

• C

  Configure a proxy policy that allows only fully qualified domain names needed to communicate to a portal.

• D

  Create a firewall rule to only allow traffic from the subnet to the internet via port 443.

• E

  Create a firewall rule to only allow traffic from the subnet to the internet to fully qualified names that are not identified as malicious by the firewall vendor.

• F

  Configure a proxy policy that blocks only lists of known-bad, fully qualified domain names.