stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
DNS Security Associate (Quiz 2) Flashcards | StudBud
Explore
/
DNS Security Associate (Quiz 2)
What does DNSSEC provide?
What is MITRE technique T1572?
DNS Security Associate (Quiz 2)
20 terms
·
StudBud Administration
·
6 plays
Imported from external platform
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
What is MITRE technique T1572?
DNS amplification
SMTP spoofing
DNS protocol tunneling
Email phishing
2
What does DNSSEC provide?
Traffic encryption
Content filtering
Domain blocking
Authentication and integrity for DNS
3
How does PDNS differ from encrypted DNS?
Encrypted DNS blocks malicious sites
They are the same
PDNS encrypts traffic
PDNS filters; encrypted DNS secures communication
4
Which DNS type does PDNS typically operate on?
DNS caching proxies
Authoritative DNS servers
Root DNS servers
Recursive DNS servers
5
What challenge does encrypted DNS create for security teams?
Prevents inspection of DNS queries
Blocks email delivery
Slows down websites
Requires more memory
6
Why do attackers use lookalike domains?
To deceive users into visiting fake sites
To bypass firewall settings
To store logs
To host legitimate services
7
What is a drawback of DoH?
Hard to block or inspect
Relies on old protocols
Uses too many ports
Cannot resolve domains
8
What happens if you access a web server by IP instead of name?
Access is faster
TLS certificate cannot be validated
HTTPS loads securely
No DNS lookup is needed
9
What is the purpose of RPZ in PDNS?
Encrypt DNS packets
Authenticate users
Compress DNS messages
Block or allow domain queries using policy rules
10
Which port does DoH use?
TCP port 443
UDP port 853
UDP port 443
TCP port 853
11
What protocol do modern applications rely on first?
DNS
ICMP
SMTP
HTTPS
12
What port does DNS over TLS (DoT) use?
UDP port 853
TCP port 853
TCP port 443
UDP port 53
13
What is the DNS 'last mile'?
Between client and recursive DNS server
Between SMTP and MTA
Between web browser and server
Between two authoritative servers
14
Which encrypted DNS protocol is hardest to detect?
Plain DNS
DNS over QUIC (DoQ)
DNS over HTTPS (DoH)
DNS over TLS (DoT)
15
What does the MITRE ATT&CK framework show about DNS?
Only affects email traffic
Only used for ICMP
Never seen in exfiltration
Used at multiple stages of an attack
16
What does encrypted DNS mainly provide?
Threat blocking
Data compression
Privacy
Logging
17
What is 'shift left' security?
Shifting DNS traffic to another server
Rotating IP addresses
Addressing security early in development
Encrypting network logs
18
Which of these is NOT provided by DNSSEC?
Integrity
Privacy
Trust between servers
Authentication
19
What does Protective DNS (PDNS) do?
Acts as an email relay
Encrypts all DNS traffic
Provides domain registration
Applies threat intelligence to DNS queries
20
What technology does PDNS commonly use?
DMARC
VPN
RPZ
Firewall
