Part 4 Exam

Question 1

Calix was asked to protect a system from a potential attack on DNS. What are the locations he would need to protect?

1. Web server buffer and host DNS server
2. Reply referrer and domain buffer
3. Web browser and browser add-on
4. Host table and external DNS server

Answer 1

DNS poisoning modifies a local lookup table on a device to point to a different domain. DNS hijacking is intended to infect an external DNS server with IP addresses that point to malicious sites.

Question 2

Which of the following is NOT a reason that threat actors use PowerShell for attacks?

1. It cannot be detected by antimalware running on the computer.
2. It leaves behind no evidence on a hard drive.
3. It can be invoked prior to system boot.
4. Most applications flag it as a trusted application.

Answer 2

PowerShell is not invoked prior to system boot.