nerdexam
EC-Council

312-50V12 · Question #95

John, a professional hacker, decided to use DNS to perform data exfiltration on a target network. In this process, he embedded malicious data into the DNS protocol packets that even DNSSEC cannot…

The correct answer is D. DNS tunneling method. DNS tunneling is a technique used to bypass network security controls by encapsulating non- DNS traffic within DNS packets. By embedding malicious data into the DNS protocol packets, an attacker can bypass firewalls and other security controls that are not configured to inspect…

Submitted by skyler.x· Mar 4, 2026Network and Perimeter Hacking

Question

John, a professional hacker, decided to use DNS to perform data exfiltration on a target network. In this process, he embedded malicious data into the DNS protocol packets that even DNSSEC cannot detect. Using this technique, John successfully injected malware to bypass a firewall and maintained communication with the victim machine and C&C server. What is the technique employed by John to bypass the firewall?

Options

  • ADNSSEC zone walking
  • BDNS cache snooping
  • CDNS enumeration
  • DDNS tunneling method

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    11% (3)
  • C
    4% (1)
  • D
    82% (23)

Explanation

DNS tunneling is a technique used to bypass network security controls by encapsulating non- DNS traffic within DNS packets. By embedding malicious data into the DNS protocol packets, an attacker can bypass firewalls and other security controls that are not configured to inspect DNS traffic. DNSSEC zone walking is a technique used to extract information from DNSSEC-signed zones by iterating over the DNS tree. DNS cache snooping is a technique used to obtain information about a DNS server's cache by sending queries for non-existent domain names. DNS enumeration is a technique used to gather information about a target network by querying DNS servers for information about the network's hosts and services.

Topics

#DNS tunneling#Data exfiltration#Firewall bypass#C2 communication

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice