Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 614

Which action blocks specific IP addresses whenever a computer with Cisco Secure Endpoint installed connects to the network?

Answer options

• A. Create an application block list and add the IP addresses.
• B. Create an IP Block & Allow list and add the IP addresses.
• C. Create an advanced custom detection policy and add the IP addresses.
• D. Create a simple custom detection policy and add the IP addresses.

Correct answer: B

Explanation

The correct answer, B, is appropriate because an IP Block & Allow list specifically allows you to block or permit traffic from designated IP addresses. The other options focus on application-level blocking or detection policies, which do not effectively address the requirement to block IP addresses directly.