Exam PT0-003 topic 1 question 50 discussion

Actual exam question from CompTIA's PT0-003

Question #: 50
Topic #: 1

A client recently hired a penetration testing firm to conduct an assessment of their consumer-facing web application. Several days into the assessment, the client's networking team observes a substantial increase in DNS traffic. Which of the following would most likely explain the increase in DNS traffic?

A. Covert data exfiltration
B. URL spidering
C. HTML scrapping
D. DoS attack

Show Suggested Answer

Suggested Answer: A 🗳️

by Wolf541 at March 26, 2025, 2:10 p.m.

Comments

Submit Cancel

LandonSmith11

2 months, 2 weeks ago

Selected Answer: A

While URL spidering (crawling the website to discover all its links) does generate HTTP requests, it primarily results in HTTP/S traffic, not a massive surge in DNS queries. DNS lookups are performed for the initial domain resolution, but subsequent requests to the same domain will often use cached DNS information.

upvoted 1 times

...

AMGWheelman

3 months ago

Selected Answer: A

DNS exfiltration works by encoding data into DNS queries and sending it to a malicious DNS server controlled by the attacker. The attacker can then decode the received DNS traffic to reconstruct the stolen data.

upvoted 1 times

...

Wolf541

3 months ago

Selected Answer: B

Chat GPT said URL spidering and I talk with a professional they told me that DNS exfiltration doesn’t makes sense to them. Anyone have any ideas?

upvoted 2 times

...