Adam has been asked to implement an allow list for websites that his servers can visit. What concern should he raise about the implementation of allow lists?
Answer Options
Allow lists can be difficult to manage and cause failures if sites that are needed are not added.
Allow lists do not prevent sites from being visited if they are not on the allow list.
Allow lists cannot be configured to allow entire domains to be visited, creating significant overhead.
Allow lists are prone to error, allowing unwanted sites to be added.
Correct Answer: A
Explanation
Allow lists can be difficult to manage over time, particularly as manufacturers and vendors add additional download and update sites and subdomains. This creates additional work for administrators and can cause errors or issues with updates and patching if not carefully monitored. Allow lists do prevent sites from being visited if they are not on the list, they can be configured with wildcards to allow entire domains or subdomains if desired, and they only allow sites that are added, meaning any problems with unwanted sites are the responsibility of the allow list administrator.