Question 1 of 30
A cybersecurity analyst is investigating a recent malware outbreak within a corporate network. The malware is designed to exfiltrate sensitive data by establishing a covert channel through DNS queries. The analyst discovers that the malware sends out DNS requests that contain encoded data in the subdomain field. To mitigate this threat, the analyst decides to implement a DNS filtering solution. Which of the following actions would be the most effective in preventing the malware from successfully exfiltrating data through DNS?
Implementing DNS query logging and blocking requests to known malicious domains.
Increasing the TTL (Time to Live) for DNS records to reduce the frequency of DNS queries.
Configuring the firewall to allow only outbound DNS requests to specific IP addresses.
Enforcing strict password policies for all user accounts to prevent unauthorized access.

Preparing for CISCO 700-765 Cisco Security Architecture for System Engineers? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free