FCSS – Enterprise Firewall Administrator 7.6 — Question 7

You must update a firewall policy to block multiple websites within the subnet 172.165.58.0/24.
What must you do to block these addresses efficiently?

Answer options

• A. Create an application sensor and apply the application control profile to the firewall policy.
• B. Create a URL niter and apply the web filter profile to the firewall policy.
• C. Create an IP address external connector and apply it to the destination field of the firewall policy.
• D. Create an Internet Service Database (ISDB) group and apply it to the destination field of the firewall policy.

Correct answer: C

Explanation

The correct answer is C because creating an IP address external connector allows you to specify multiple addresses efficiently in the firewall policy. The other options either target application control or web filtering, which are not as effective for blocking specific IP addresses in this context.