Refer to the exhibit. A security engineer must improve security in an organization and is producing a risk mitigation strategy to present to management for approval. Which action must the security…

The correct answer is D. Inspect DNS traffic. Based on the Attacks Risk Report, DNS is associated with a high number of impact events (16). DNS traffic is critical for network operations but can also be exploited for malicious activities such as DNS tunneling, DDoS attacks, and data exfiltration. To improve security, the…

Management and Troubleshooting

Question

Refer to the exhibit. A security engineer must improve security in an organization and is producing a risk mitigation strategy to present to management for approval. Which action must the security engineer take based on this Attacks Risk Report?

Exhibits

Options

ABlock NetBIOS.
BInspect TCP port 80 traffic.
CBlock Internet Explorer.
DInspect DNS traffic.

How the community answered

(23 responses)

A
4% (1)
B
9% (2)
C
13% (3)
D
74% (17)

Explanation

Based on the Attacks Risk Report, DNS is associated with a high number of impact events (16). DNS traffic is critical for network operations but can also be exploited for malicious activities such as DNS tunneling, DDoS attacks, and data exfiltration. To improve security, the security engineer should focus on inspecting DNS traffic. This involves deploying DNS security solutions and monitoring DNS traffic for anomalies to detect and mitigate potential threats. Implement DNS security tools such as DNS filtering, DNSSEC, and DNS anomaly detection. Configure the firewall to inspect DNS traffic for malicious activities. Regularly analyze DNS logs to identify and respond to threats. This action addresses a significant risk identified in the report and helps to mitigate potential attacks exploiting DNS.

Topics

#Risk Mitigation#DNS Security#Network Threat Analysis

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice