Instant Access Cisco.350-701.v2022-08-21.q531 Actual Practice Test Engine for Free (Page 107)

Question 526

What are two DDoS attack categories? (Choose two.)

A.volume-based
B.protocol
C.database
D.sequential
E.source-based

Question 527

Drag and drop the Firepower Next Generation Intrustion Prevention System detectors from the left onto the correct definitions on the right.

Question 528

Which type of DNS abuse exchanges data between two computers even when there is no direct connection?

A.Malware installation
B.Command-and-control communication
C.Network footprinting
D.Data exfiltration

Correct Answer: D

Malware installation: This may be done by hijacking DNS queries and responding with malicious IP addresses. Command & Control communication: As part of lateral movement, after an initial compromise, DNS communications is abused to communicate with a C2 server. This typically involves making periodic DNS queries from a computer in the target network for a domain controlled by the adversary. The responses contain encoded messages that may be used to perform unauthorized actions in the target network. Network footprinting: Adversaries use DNS queries to build a map of the network. Attackers live off the terrain so developing a map is important to them. Data theft (exfiltration): Abuse of DNS to transfer data; this may be performed by tunneling other protocols like FTP, SSH through DNS queries and responses. Attackers make multiple DNS queries from a compromised computer to a domain owned by the adversary. DNS tunneling can also be used for executing commands and transferring malware into the target network. Reference: https://www.netsurion.com/articles/5-types-of-dns-attacks-and-how-to-detect-them Command & Control communication: As part of lateral movement, after an initial compromise, DNS communications is abused to communicate with a C2 server. This typically involves making periodic DNS queries from a computer in the target network for a domain controlled by the adversary. The responses contain encoded messages that may be used to perform unauthorized actions in the target network.
Network footprinting: Adversaries use DNS queries to build a map of the network. Attackers live off the terrain so developing a map is important to them.
Data theft (exfiltration): Abuse of DNS to transfer data; this may be performed by tunneling other protocols like FTP, SSH through DNS queries and responses. Attackers make multiple DNS queries from a compromised computer to a domain owned by the adversary. DNS tunneling can also be used for executing commands and transferring malware into the target network.
Malware installation: This may be done by hijacking DNS queries and responding with malicious IP addresses. Command & Control communication: As part of lateral movement, after an initial compromise, DNS communications is abused to communicate with a C2 server. This typically involves making periodic DNS queries from a computer in the target network for a domain controlled by the adversary. The responses contain encoded messages that may be used to perform unauthorized actions in the target network. Network footprinting: Adversaries use DNS queries to build a map of the network. Attackers live off the terrain so developing a map is important to them. Data theft (exfiltration): Abuse of DNS to transfer data; this may be performed by tunneling other protocols like FTP, SSH through DNS queries and responses. Attackers make multiple DNS queries from a compromised computer to a domain owned by the adversary. DNS tunneling can also be used for executing commands and transferring malware into the target network. Reference: https://www.netsurion.com/articles/5-types-of-dns-attacks-and-how-to-detect-them

Question 529

With which components does a southbound API within a software-defined network architecture communicate?

A.appliances
B.devices such as routers and switches
C.controllers within the network
D.applications

Question 530

Drag and drop the NetFlow export formats from the left onto the descriptions on the right.

Question 526

Question 527

Question 528

Question 529

Question 530

Download PDF File