What are three factors that can be used in domain generation algorithms? (Choose three.)

The correct answer is A. cryptographic keys B. time of day C. other unique values. Domain generation algorithms (DGAs) are used to auto-generate domains, typically in large numbers within the context of establishing a malicious command-and-control (C2) communications channel. DGA-based malware (such as Pushdo, BankPatch, and CryptoLocker) limit the number of…

Threat Prevention

Question

Options

Acryptographic keys
Btime of day
Cother unique values
DURL custom categories
EIP address

How the community answered

(55 responses)

A
80% (44)
D
7% (4)
E
13% (7)

Explanation

Domain generation algorithms (DGAs) are used to auto-generate domains, typically in large numbers within the context of establishing a malicious command-and-control (C2) communications channel. DGA-based malware (such as Pushdo, BankPatch, and CryptoLocker) limit the number of domains from being blocked by hiding the location of their active C2 servers within a large number of possible suspects, and can be algorithmically generated based on factors such as time of day, cryptographic keys, or other unique values. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/dns- security/domain-generation-algorithm-detection

Topics

#domain generation algorithms#DGA#C2 detection#cryptographic entropy

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice