CrowdStrike
CCFH-202B · Question #75
Your organization's next-gen firewall has detected evidence of DNS beaconing occurring from an internal source. The firewall provides you with the beaconing host's internal (private) IP address. In…
Sign in or unlock CCFH-202B to reveal the answer and full explanation for question #75. The question stem and answer options stay visible for context.
Network-Based Threat Hunting
Question
Your organization's next-gen firewall has detected evidence of DNS beaconing occurring from an internal source. The firewall provides you with the beaconing host's internal (private) IP address. In an IP search, which field would you leverage to identify the hostname based on this indicator?
Options
- ADestination IP
- BBulk Host Audit
- CExternal IP
- DSource IP
Unlock CCFH-202B to see the answer
You've previewed enough free CCFH-202B questions. Unlock CCFH-202B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#IP Search#DNS beaconing#Source IP#host identification