PCNSA · Question #304
To enable DNS sinkholing, which two addresses should be reserved? (Choose two.)
The correct answer is B. IPv6 D. IPv4. DNS sinkholing works by redirecting DNS queries for known malicious domains to a designated sinkhole IP address controlled by the firewall or security team. To properly handle both modern and legacy network environments, two sinkhole addresses must be reserved: one IPv4 address…
Question
To enable DNS sinkholing, which two addresses should be reserved? (Choose two.)
Options
- AMAC
- BIPv6
- CEmail
- DIPv4
How the community answered
(56 responses)- A5% (3)
- B91% (51)
- C4% (2)
Explanation
DNS sinkholing works by redirecting DNS queries for known malicious domains to a designated sinkhole IP address controlled by the firewall or security team. To properly handle both modern and legacy network environments, two sinkhole addresses must be reserved: one IPv4 address and one IPv6 address. When an infected host queries a malicious domain, DNS returns the sinkhole IP; any subsequent connection attempt to that IP is logged, identifying the compromised host. MAC addresses and email addresses are not applicable to DNS resolution and sinkhole configuration.
Topics
Community Discussion
No community discussion yet for this question.