Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Cisco Exam 200-201 Topic 5 Question 85 Discussion

Actual exam question for Cisco's 200-201 exam

Question #: 85
Topic #: 5

[All 200-201 Questions]

A network engineer noticed in the NetFlow report that internal hosts are sending many DNS requests to external DNS servers A SOC analyst checked the endpoints and discovered that they are infected and became part of the botnet Endpoints are sending multiple DNS requests but with spoofed IP addresses of valid external sources What kind of attack are infected endpoints involved in1?

ADNS hijacking

BDNS tunneling

CDNS flooding

DDNS amplification

Show Suggested Answer

Suggested Answer: D

by Melynda at May 02, 2024, 05:42 PM

Limited Time Offer

25%

Off

Get Premium 200-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lauryn

7 months ago

Yeah, DNS amplification increases attack volume using spoofed IP addresses. D seems right.

upvoted 0 times

...

Luis

7 months ago

Flooding is just sending lots of requests. Spoofing IPs points more towards amplification.

upvoted 0 times

...

Lashawn

7 months ago

But isn't DNS flooding similar? Both involve multiple requests, right?

upvoted 0 times

...

Gary

7 months ago

I agree with User2. DNS amplification involves sending spoofed requests to overload targets.

upvoted 0 times

...

Jerilyn

7 months ago

I think it's D, DNS amplification. The part about spoofed IPs makes sense.

upvoted 0 times

...

Francine

7 months ago

This question seems tricky. What do you think?

upvoted 0 times

...

az-700 pass4success az-104 200-301 200-201 cissp 350-401 350-201 350-501 350-601 350-801 350-901 az-720 az-305 pl-300

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77