200-201 · Question #496
A large load of data is being transferred to an external destination via UDP 53 port. Which obfuscation technique is used?
The correct answer is D. DNS tunneling. UDP port 53 is primarily used for DNS (Domain Name System) traffic. A large amount of data being transferred over this port suggests the use of DNS tunneling, an obfuscation technique where attackers encode data inside DNS queries and responses to bypass security controls. This…
Question
A large load of data is being transferred to an external destination via UDP 53 port. Which obfuscation technique is used?
Options
- Aproxied traffic
- BC&C connection
- Cdata masking
- DDNS tunneling
How the community answered
(51 responses)- A4% (2)
- B2% (1)
- C2% (1)
- D92% (47)
Explanation
UDP port 53 is primarily used for DNS (Domain Name System) traffic. A large amount of data being transferred over this port suggests the use of DNS tunneling, an obfuscation technique where attackers encode data inside DNS queries and responses to bypass security controls. This method allows data exfiltration or command-and-control (C&C) communication while appearing as legitimate DNS traffic.
Topics
Community Discussion
No community discussion yet for this question.