How might corporate IT professionals deal with DNS-based cyber threats?

Last Updated: Oct 26, 2020
IT Exam Items Repository › Category: CCNA CyberOps › How might corporate IT professionals deal with DNS-based cyber threats?

How might corporate IT professionals deal with DNS-based cyber threats?

  • Limit the number of simultaneously opened browsers or browser tabs.
  • Monitor DNS proxy server logs and look for unusual DNS queries.
  • Use IPS/IDS devices to scan internal corporate traffic.
  • Limit the number of DNS queries permitted within the organization.

Explanation: DNS queries for randomly generated domain names or extremely long random-appearing DNS subdomains should be considered suspicious. Cyberanalysts could do the following for DNS-based attacks:
Analyze DNS logs.
Use a passive DNS service to block requests to suspected CnC and exploit domains.

Related exam: CyberOps Associate (Version 1.0) - CyberOps Associate 1.0 Practice Final exam
Related exam: CCNA Cyber Ops Chapter 11 Exam Answers

About The Author

ITExam Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.