Exam CFR-310 topic 1 question 39 discussion

D. Update access control list (ACL) rules for network devices Explanation: The Internet Storm Center advisory page provides lists of known malicious IP addresses and networks. Why the other answers are incorrect: A. Update the latest proxy access list: While a proxy can control web access, the blacklisted IP addresses from the Internet Storm Center are more relevant for network-wide blocking via ACLs, not just web traffic filtering. B. Monitor the organization’s network for suspicious traffic: While the blacklisted IPs could be used for monitoring, the primary purpose of visiting the advisory page is to prevent communication with malicious hosts, which is achieved by updating ACLs. C. Monitor the organization’s sensitive databases: The blacklisted IP addresses are not specifically related to database monitoring but are used to block potentially malicious external traffic.