medium10 pts · first answer countscloud-securitythreat-detectiondns

Data leaking through DNS

GuardDuty reports DNS queries with long random subdomains like a8f3e...data.evil.example from a server. What is likely happening, and what can block it?

A.A slow DNS server; switch to a public resolver such as 8.8.8.8B.Normal CDN cache traffic; no action is needed at allC.A TLS problem; renew the server's certificate todayD.DNS tunnelling; block it with Route 53 Resolver DNS Firewall

Discussion 0

Join free to post in the discussion.

Data leaking through DNS

Discussion 0

Related questions