Which technique is an example of a DNS attack that Advanced DNS Security can detect and prevent?

Question

Options

• AHigh entropy DNS domains
• BPolymorphic DNS
• CCNAME cloaking
• DDNS domain rebranding

• A
  87% (27)
• B
  3% (1)
• C
  6% (2)
• D
  3% (1)

Explanation

Advanced DNS Security on Palo Alto Networks firewalls is designed to identify and prevent a wide range of DNS-based attacks. Among the listed options, "High entropy DNS domains" is a specific example of a DNS attack that Advanced DNS Security can detect and block. High entropy DNS domains are often used in attacks where randomly generated domain names (e.g., gfh34ksdu.com) are utilized by malware or bots to evade detection. This is a hallmark of Domain Generation Algorithms (DGA)-based attacks. Palo Alto Networks firewalls with Advanced DNS Security use machine learning to detect such domains by analyzing the entropy (randomness) of DNS queries. High entropy values indicate the likelihood of a dynamically generated or malicious domain.

No community discussion yet for this question.