MENU
Jason, a renowned forensic investigator, is investigating a network attack that resulted in the compromise of several systems in a reputed multinational's network. He started Wireshark to capture the network traffic. Upon investigation, he found that the DNS packets travelling across the network belonged to a non-company configured IP. Which of the following attack Jason can infer from his findings?
Suggested Answer: B
Get Premium CFA-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
BU
Buffy
11 months ago
Wow, I didn’t realize how easily DNS can be compromised!
JO
Johnetta
11 months ago
Wait, are we sure it’s not just a misconfiguration?
NA
Natalie
11 months ago
I thought DNS Redirection was more common in these cases?
LE
Lemuel
12 months ago
Definitely, those non-company IPs are suspicious!
VE
Venita
12 months ago
Sounds like DNS Poisoning to me.
TA
Tashia
12 months ago
I’m a bit confused, though. Couldn’t it also be a Cookie Poisoning Attack? I just can’t recall the specifics on that one.
DA
Darell
1 year ago
This reminds me of a practice question we did on network attacks. I think the focus on DNS packets really points towards DNS Poisoning.
RY
Ryan
1 year ago
I'm not entirely sure, but I feel like DNS Redirection might also fit here since it involves redirecting traffic to a different IP.
KR
Krissy
1 year ago
I remember studying DNS attacks, and I think DNS Poisoning could be the right answer since it involves altering DNS records.
BR
Brandon
1 year ago
This is a tricky one. I'm not entirely confident, but I'm going to go with DNS Poisoning. The non-company IP address seems like the biggest clue here.
GL
Glory
1 year ago
Okay, let's see. The key details are the non-company IP and the DNS packets. I think DNS Poisoning is the most logical choice, but I'll double-check the other options just to be sure.
AV
Avery
1 year ago
This seems like a straightforward DNS-related attack based on the information provided. I'm leaning towards DNS Poisoning as the most likely answer.
LA
Lamonica
1 year ago
Hmm, I'm a bit unsure here. The question mentions non-company configured IP, so it could also be a DNS Redirection attack. I'll need to think this through carefully.
JA
Janet
1 year ago
I'm pretty sure this is asking about the types of BIOC rules available in Cortex XDR. I think the answer is B. Discovery, since that's one of the main categories of BIOC rules.
MY
Myra
1 year ago
I think the key here is that the question is asking if it's possible, not whether it's recommended. Based on that, I'd say option B is the correct answer - you can do image automation outside of Citrix, but it should be a last resort.
MA
Maryrose
1 year ago
Ha! This reminds me of that time I accidentally spilled coffee on my laptop and had to use the office toaster as a makeshift router. Good times, good times.
JO
Jose
1 year ago
D) Session poisoning
VA
Valentine
1 year ago
C) DNS Redirection
LA
Lang
1 year ago
B) Cookie Poisoning Attack
IS
Isabelle
1 year ago
A) DNS Poisoning
DI
Dierdre
1 year ago
Ooh, this is a tough one. I'm gonna go with D - Session poisoning. Gotta love it when the bad guys try to hijack your online sessions. Bet Jason's got his work cut out for him on this one.
PE
Pearly
1 year ago
C) DNS Redirection
RY
Ryan
1 year ago
B) Cookie Poisoning Attack
MI
Mirta
1 year ago
A) DNS Poisoning
FL
Fletcher
1 year ago
C) DNS Redirection
NO
Noel
1 year ago
B) Cookie Poisoning Attack
DO
Donte
1 year ago
A) DNS Poisoning
LY
Lynelle
1 year ago
Gotta be B - Cookie Poisoning Attack, right? I mean, who doesn't love a good old-fashioned cookie heist? The hackers are really getting creative these days.
GE
Gerry
1 year ago
Hmm, this one's tricky. I'm gonna go with A - DNS Poisoning. Messing with the DNS? Classic move. Bet the IT team's got their hands full trying to clean up this mess.
GO
Goldie
1 year ago
Maybe they exploited a vulnerability in the system to launch the attack.
GA
Gail
1 year ago
I wonder how the attacker gained access to the network in the first place.
AN
Antonio
1 year ago
Yeah, it's a sneaky way to redirect users to malicious websites.
ST
Stephaine
1 year ago
I think you're right, DNS Poisoning is a common attack method.
ST
Stanton
2 years ago
Ah, a classic DNS attack! This one's a real head-scratcher. Let's see, I'd say the answer is C - DNS Redirection. Gotta love it when the hackers try to play hide-and-seek with the corporate network, eh?
AL
Aleta
2 years ago
I'm not sure, but DNS Redirection could also be a possibility, right?
FR
Franchesca
2 years ago
I agree with Quentin, DNS Poisoning makes sense given the non-company configured IP.
QU
Quentin
2 years ago
I think the attack could be DNS Poisoning.