Firewall PBQs: CompTIA Cyber Security Analyst (CS0-003)

Your SOC has detected a brute-force attack against SSH and RDP from IP address 203.0.113.50. As part of your incident response, update the firewall to block all traffic from the attacker's IP, restrict SSH access to the admin subnet only, and remove unnecessary RDP exposure. HTTPS must remain accessible to all.