A prospective customer is concerned about stopping data exfiltration, data infiltration, and command-and-control (C2) activities over port 53. Which subscription(s) should the systems engineer…

The correct answer is C. DNS Security. DNS Security (Answer C): DNS Security is the appropriate subscription for addressing threats over port 53. DNS tunneling is a common method used for data exfiltration, infiltration, and C2 activities, as it allows malicious traffic to be hidden within legitimate DNS queries…

Cloud-Delivered Security Services (CDSS)

Question

A prospective customer is concerned about stopping data exfiltration, data infiltration, and command-and-control (C2) activities over port 53. Which subscription(s) should the systems engineer recommend?

Options

AThreat Prevention
BApp-ID and Data Loss Prevention
CDNS Security
DAdvanced Threat Prevention and Advanced URL Filtering

How the community answered

(46 responses)

A
2% (1)
C
93% (43)
D
4% (2)

Explanation

DNS Security (Answer C): DNS Security is the appropriate subscription for addressing threats over port 53. DNS tunneling is a common method used for data exfiltration, infiltration, and C2 activities, as it allows malicious traffic to be hidden within legitimate DNS queries. The DNS Security service applies machine learning models to analyze DNS queries in real-time, block malicious domains, and prevent tunneling activities. It integrates seamlessly with the NGFW, ensuring advanced protection against DNS-based threats without requiring additional infrastructure.

Topics

#DNS Security#C2 detection#data exfiltration#port 53

Community Discussion

No community discussion yet for this question.

Full PSE-STRATA-PRO-24 Practice