Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 234

An engineer must modify a policy to block specific addresses using Cisco Umbrella. The policy is created already and is actively used by devices, using many of the default policy elements. What else must be done to accomplish this task?

Answer options

• A. Create a destination list for addresses to be allowed or blocked
• B. Use content categories to block or allow specific addresses
• C. Add the specified addresses to the identities list and create a block action
• D. Modify the application settings to allow only applications to connect to required addresses

Correct answer: A

Explanation

The correct answer, A, is necessary because creating a destination list allows the engineer to specify which addresses should be blocked or allowed. Options B, C, and D do not directly address the requirement to block specific addresses in the context of modifying the existing policy effectively.