Valid N10-008 Dumps shared by ExamDiscuss.com for Helping Passing N10-008 Exam! ExamDiscuss.com now offer the newest N10-008 exam dumps, the ExamDiscuss.com N10-008 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com N10-008 dumps with Test Engine here:
A firewall administrator observes log entries of traffic being allowed to a web server on port 80 and port 443. The policy for this server is to only allow traffic on port 443. The firewall administrator needs to investigate how this change occurred to prevent a reoccurrence. Which of the following should the firewall administrator do next?
Correct Answer: A
Firewall audit logs are records of the changes made to the firewall configuration, policies, and rules. They can help the firewall administrator to track who, when, and what changes were made to the firewall, and identify any unauthorized or erroneous modifications that could cause security issues or network outages. By consulting the firewall audit logs, the firewall administrator can investigate how the change that allowed traffic on port 80 to the web server occurred, and prevent it from happening again