GIAC
GREM · Question #176
A sample performs periodic DNS queries with base64 encoded payloads. What is this behavior?
The correct answer is B. DNS tunneling. See the full explanation below for the reasoning.
Question
A sample performs periodic DNS queries with base64 encoded payloads. What is this behavior?
Options
- APersistence
- BDNS tunneling
- CUAC bypass
- DExploit chaining
How the community answered
(22 responses)- A9% (2)
- B82% (18)
- C5% (1)
- D5% (1)
Community Discussion
No community discussion yet for this question.