CAS-005 · Question #202
A security engineer wants to enhance the security posture of end-user systems in a zero trust environment. Given the following requirements: - Reduce the ability for potentially compromised endpoints
The correct answer is A. DNS sinkholing. DNS sinkholing is the best solution to meet these requirements. By redirecting malicious DNS requests (such as those from compromised endpoints attempting to contact command and control (C2) infrastructure) to a "sinkhole" server, the security engineer can prevent communication b
Question
A security engineer wants to enhance the security posture of end-user systems in a zero trust environment. Given the following requirements:
- Reduce the ability for potentially compromised endpoints to contact
C2 infrastructure.
- Track the requests that the malware makes to the IPs.
- Avoid the download of additional payloads.
Which of the following should the engineer deploy to meet these requirements?
Options
- ADNS sinkholing
- BBrowser isolation
- CZone transfer protection
- DHIDS
How the community answered
(28 responses)- A79% (22)
- B11% (3)
- C4% (1)
- D7% (2)
Explanation
DNS sinkholing is the best solution to meet these requirements. By redirecting malicious DNS requests (such as those from compromised endpoints attempting to contact command and control (C2) infrastructure) to a "sinkhole" server, the security engineer can prevent communication between the malware and the attacker’s infrastructure. Additionally, DNS sinkholing allows for tracking and logging of the requests that the malware attempts to make, while also preventing the malware from downloading additional payloads by blocking these
Community Discussion
No community discussion yet for this question.