Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

CertNexus Exam CFR-410 Topic 3 Question 23 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 23
Topic #: 3

[All CFR-410 Questions]

During a malware-driven distributed denial of service attack, a security researcher found excessive requests to a name server referring to the same domain name and host name encoded in hexadecimal. The malware author used which type of command and control?

AInternet Relay Chat (IRC)

BDnscat2

CCustom channel

DFile Transfer Protocol (FTP)

Show Suggested Answer

Suggested Answer: B, E

by Tonette at Oct 16, 2023, 04:50 PM

Limited Time Offer

25%

Off

Get Premium CFR-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Luther

2 months ago

FTP? Seriously? That's like using a carrier pigeon to send your malware instructions. Dnscat2 all the way, baby!

upvoted 0 times

Myong

19 days ago

C) Custom channel

upvoted 0 times

...

Anglea

25 days ago

B) Dnscat2

upvoted 0 times

...

Shelia

1 months ago

A) Internet Relay Chat (IRC)

upvoted 0 times

...

...

Nathan

2 months ago

IRC? Really? What is this, the early 2000s? Gotta be Dnscat2, that's the newest and most sophisticated-sounding option.

upvoted 0 times

Mirta

10 days ago

Dnscat2 is the way to go for this type of command and control.

upvoted 0 times

...

Art

13 days ago

Definitely not FTP, that's too basic.

upvoted 0 times

...

Dominga

29 days ago

Yeah, IRC seems outdated for this kind of attack.

upvoted 0 times

...

Dorthy

2 months ago

I think it's Dnscat2 too, sounds more advanced.

upvoted 0 times

...

...

Aleisha

2 months ago

I'm not sure, but I think C) Custom channel could also be a possibility.

upvoted 0 times

...

Brunilda

2 months ago

Custom channel? Sounds like the malware author was trying to be a special snowflake. I'll go with B, Dnscat2, it's the most technical-sounding one.

upvoted 0 times

Lauryn

1 months ago

Yeah, it seems like the most likely choice for this scenario.

upvoted 0 times

...

Josephine

1 months ago

I agree, Dnscat2 does sound pretty technical.

upvoted 0 times

...

...

Lorenza

2 months ago

Dnscat2? Sounds like a dance move to me! But hey, at least it's not FTP - that's so 90s.

upvoted 0 times

...

Shenika

2 months ago

I agree with Sophia, Dnscat2 makes sense in this scenario.

upvoted 0 times

...

Sophia

2 months ago

I think the answer is B) Dnscat2.

upvoted 0 times

...

az-700 pass4success az-104 200-301 200-201 cissp 350-401 350-201 350-501 350-601 350-801 350-901 az-720 az-305 pl-300

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77