Analyze the Information Provided in an IP Search CCFR Practice Questions (Page 4)

Questions 16–16

1. 16application · medium

   A Responder is analyzing an IP Search result for 203.0.113.78. The IP has a threat score of 25, but the associated domain has been observed in a recent malware campaign. The Responder must decide whether to block this IP. What is the most appropriate action based on the IP Search data?

   • ABlock the IP only if it is in the same subnet as other malicious IPs.
   • BInvestigate the relationship between the IP and the malicious domain before blocking.
   • CBlock the IP immediately because the domain is malicious.
   • DDo not block the IP because the threat score is low.
   Reveal Solution Discussion Select an answer first