nerdexam
Cisco

350-201 · Question #62

Refer to the exhibit. What results from this script?

The correct answer is B. A search is conducted for additional seeds. The script expands a known seed list by searching for and discovering additional domains to include as seeds for threat intelligence or DGA detection.

Automation

Question

Refer to the exhibit. What results from this script?

Exhibit

350-201 question #62 exhibit

Options

  • ASeeds for existing domains are checked
  • BA search is conducted for additional seeds
  • CDomains are compared to seed rules
  • DA list of domains as seeds is blocked

How the community answered

(44 responses)
  • A
    5% (2)
  • B
    80% (35)
  • C
    11% (5)
  • D
    5% (2)

Why each option

The script expands a known seed list by searching for and discovering additional domains to include as seeds for threat intelligence or DGA detection.

ASeeds for existing domains are checked

Checking seeds for existing domains describes a validation or lookup action against already-known entries, not a discovery search operation that generates new seed candidates.

BA search is conducted for additional seedsCorrect

The script conducts a search for additional seeds by querying or analyzing domains to discover new entries that can be appended to a threat intelligence feed or DGA detection dataset. This seed expansion operation goes beyond validating existing entries and actively grows the detection scope to cover broader malicious domain infrastructure.

CDomains are compared to seed rules

Comparing domains to seed rules describes a matching or filtering operation against an existing ruleset, not the outward search for new seeds that the script performs.

DA list of domains as seeds is blocked

Blocking a list of domains as seeds describes an enforcement or blacklisting action, which is an output operation distinct from the search and discovery logic shown in the script.

Concept tested: Threat intelligence domain seed discovery scripting

Topics

#domain analysis#DGA detection#seed generation#scripting

Community Discussion

No community discussion yet for this question.

Full 350-201 Practice