A company's help desk is experiencing a large number of calls from the finance department security logs: Which of the following is most likely the cause of the issue?

The correct answer is C. DNS traffic is being sinkholed. Sinkholing, or DNS sinkholing, is a method used to redirect malicious traffic to a safe destination. This technique is often employed by security teams to prevent access to malicious domains by substituting a benign destination IP address. HTTP status code 495. This status code…

Submitted by ahmad_uae· Mar 6, 2026Security Operations

Question

A company’s help desk is experiencing a large number of calls from the finance department security logs:

Which of the following is most likely the cause of the issue?

Exhibits

Options

ARecursive DNS resolution is failing
BThe DNS record has been poisoned.
CDNS traffic is being sinkholed.
DThe DNS was set up incorrectly.

How the community answered

(21 responses)

A
14% (3)
B
10% (2)
C
71% (15)
D
5% (1)

Explanation

Sinkholing, or DNS sinkholing, is a method used to redirect malicious traffic to a safe destination. This technique is often employed by security teams to prevent access to malicious domains by substituting a benign destination IP address. HTTP status code 495. This status code is typically indicative of a client certificate error, which can occur if the DNS traffic is being manipulated or redirected incorrectly. The consistency in receiving the same HTTP status code across different users suggests a systematic issue rather than an isolated incident.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice