Which of the following is the MOST appropriate action to take in the situation?

A security analyst working in the SOC recently discovered Balances m which hosts visited a specific set of domains and IPs and became infected with malware.

Which of the following is the MOST appropriate action to take in the situation?
A . implement an IPS signature for the malware and update the blacklisting for the associated domains and IPs
B . Implement an IPS signature for the malware and another signature request to Nock all the associated domains and IPs
C . Implement a change request to the firewall setting to not allow traffic to and from the IPs and domains
D . Implement an IPS signature for the malware and a change request to the firewall setting to not allow traffic to and from the IPs and domains

View Answer

Answer: C