Choosing a narrowly scoped network rule
A fictional monitoring service needs to send new HTTPS requests to one designated server on TCP 443. Existing rules already allow the necessary return traffic. Which new outbound rule best follows least privilege?
A
Remove all network logging because monitoring is authorized.
B
Allow that monitoring source to reach the designated server on TCP 443.
C
Allow all sources to reach all destinations on every port.
D
Allow only an unrelated source to use an unrelated service.
Question Leaderboard
Not enough data yet to show leaderboard.