ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 350-701 All Questions

View all questions & answers for the 350-701 exam
Go to Exam

Exam 350-701 topic 1 question 521 discussion

Actual exam question from Cisco's 350-701
Question #: 521
Topic #: 1
[All 350-701 Questions]



Refer to the exhibit. Consider that any feature of DNS requests, such as the length of the domain name and the number of subdomains, can be used to construct models of expected behavior to which observed values can be compared. Which type of malicious attack are these values associated with?

  • A. W32/AutoRun worm
  • B. HeartBleed SSL Bug
  • C. Eternal Blue Windows
  • D. Spectre Worm
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by west33637 at Jan. 17, 2023, 11:56 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Arris9
Highly Voted 9 months, 2 weeks ago
Definitely A. W32/AutoRun worm: https://blog.talosintelligence.com/detecting-dns-data-exfiltration/ "These identify domains with similar patterns such as: 4-9-8-2-2-3-8-5-4-6-2-9-2-3-8-8---redacted---7-.0-0-0-0-0-0-0-0-0-0-0-0-0-49-0-0-0-0-0-0-0-0-0-0-0-0-0.info 5-2-4-6-3-2-2-7-4-8-3-6-7-1-2-3---redacted---0-.0-0-0-0-0-0-0-0-0-0-0-0-0-49-0-0-0-0-0-0-0-0-0-0-0-0-0.info 6-t-y-s-8-l-l-p-6-6-x-q-2-l-2-9-x-7---redacted---a-.0-0-0-0-0-0-0-0-0-0-0-0-0-45-0-0-0-0-0-0-0-0-0-0-0-0-0.info 7-8-5-4-1-2-7-2-7-8-4-5-1-5-0-7---redacted---0-.0-0-0-0-0-0-0-0-0-0-0-0-0-28-0-0-0-0-0-0-0-0-0-0-0-0-0.info which are known to be associated with the W32/AutoRun worm."
upvoted 12 times
...
G33
Most Recent 5 months ago
A https://blog.talosintelligence.com/detecting-dns-data-exfiltration/
upvoted 1 times
...
loser4fun
7 months, 3 weeks ago
Agreed on A
upvoted 2 times
...
tanjiro23
7 months, 3 weeks ago
Selected Answer: A
A. W32/AutoRun worm
upvoted 2 times
...
CCNP21
9 months, 1 week ago
Selected Answer: A
See Arris9 link
upvoted 1 times
...
Anonymous983475
9 months, 2 weeks ago
Selected Answer: B
It's Hearbleed alright. https://www.youtube.com/watch?v=WgrBrPW_Zn4 Autorun scripts are a thing in the past, the others are unrelated.
upvoted 2 times
...
west33637
9 months, 3 weeks ago
Looks like a heartbleed SSL response to me??
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago