Chapter 17 Quiz 2

What must a security analyst do to prevent DNS tunneling?

• Implement a solution to block outbound communications

• Increase the bandwidth of the network

• Disable all DNS services

• Use only static IP addresses

What happens to data in a DNS tunneling attack using TXT records?

• It is encrypted with a public key

• It is split into multiple encoded chunks

• It is compressed into a single file

• It is deleted after transmission

What does the recursive DNS service do in a DNS tunneling attack?

• It encrypts the data

• It forwards the query to the attacker’s authoritative name server

• It blocks the query

• It sends the query back to the user

What does the attacker’s authoritative name server do upon receiving DNS queries?

• It deletes the queries

• It sends responses containing encapsulated, encoded commands

• It forwards the queries to another server

• It logs the queries for future analysis

What does the malware on the compromised host do with the received chunks?

• It deletes them

• It recombines them and executes the commands

• It sends them to another host

• It encrypts them for storage

What should be used to stop DNS tunneling?

• A filter that inspects DNS traffic

• A firewall that blocks all traffic

• A VPN service

• A proxy server

What is a key characteristic of DNS tunneling traffic?

• It is always encrypted

• It often contains suspicious domains

• It is faster than normal traffic

• It is always from trusted sources

What is the primary function of DHCP servers?

• To provide dynamic IP configuration information to clients

• To block unauthorized access to the network

• To encrypt data transmitted over the network

• To monitor network traffic

What does a threat actor achieve by providing a wrong DNS server address?

• Directing users to a malicious website

• Improving network speed

• Encrypting user data

• Blocking access to the internet

What can a threat actor do by providing a wrong IP address?

• Create a DoS attack on the DHCP client

• Improve network security

• Increase data transmission speed

• Encrypt all network data