Which Sourcefire event action should you choose if you want to block only malicious traffic from a particular end user?
A. Allow with inspection
B. Allow without inspection
C. Block
D. Trust
E. Monitor
Which Sourcefire event action should you choose if you want to block only malicious traffic from a particular end user?