SAL2 Practice Questions - TryHackMe Security Analyst Level 2 (SAL2) Exam

Access More Questions

In a Wireshark capture, an analyst observes a host sending DNS TXT record queries for long, randomized subdomain strings of 60+ characters under a single parent domain at a rate of 20 queries per minute. What is the most likely malicious activity?

DNS tunneling used for data exfiltration or C2 communication Legitimate DNSSEC validation queries BGP route injection via DNS manipulation DNS amplification DDoS attack targeting the parent domain

Correct Answer:

DNS tunneling used for data exfiltration or C2 communication

Access more questions from this quiz

Continue to SAL2 Practice Questions - TryHackMe Security Analyst Level 2 (SAL2) Exam for more practice questions and the full quiz experience.

Access More Questions