350-201 · Question #62
Refer to the exhibit. What results from this script?
The correct answer is B. A search is conducted for additional seeds. The script expands a known seed list by searching for and discovering additional domains to include as seeds for threat intelligence or DGA detection.
Question
Refer to the exhibit. What results from this script?
Exhibit
Options
- ASeeds for existing domains are checked
- BA search is conducted for additional seeds
- CDomains are compared to seed rules
- DA list of domains as seeds is blocked
How the community answered
(44 responses)- A5% (2)
- B80% (35)
- C11% (5)
- D5% (2)
Why each option
The script expands a known seed list by searching for and discovering additional domains to include as seeds for threat intelligence or DGA detection.
Checking seeds for existing domains describes a validation or lookup action against already-known entries, not a discovery search operation that generates new seed candidates.
The script conducts a search for additional seeds by querying or analyzing domains to discover new entries that can be appended to a threat intelligence feed or DGA detection dataset. This seed expansion operation goes beyond validating existing entries and actively grows the detection scope to cover broader malicious domain infrastructure.
Comparing domains to seed rules describes a matching or filtering operation against an existing ruleset, not the outward search for new seeds that the script performs.
Blocking a list of domains as seeds describes an enforcement or blacklisting action, which is an output operation distinct from the search and discovery logic shown in the script.
Concept tested: Threat intelligence domain seed discovery scripting
Topics
Community Discussion
No community discussion yet for this question.
