A Security Administrator Has Completed a Monthly Review of DNS

question 426

Multiple Choice

A security administrator has completed a monthly review of DNS server query logs. The administrator notices continuous name resolution attempts from a large number of internal hosts to a single Internet addressable domain name. The security administrator then correlated those logs with the establishment of persistent TCP connections out to this domain. The connections seem to be carrying on the order of kilobytes of data per week. Which of the following is the MOST likely explanation for this company?

• A) An attacker is exfiltrating large amounts of proprietary company data.
• B) Employees are playing multiplayer computer games.
• C) A worm is attempting to spread to other hosts via SMB exploits.
• D) Internal hosts have become members of a botnet.

---

Definitions:

Technology-Delivered Psychotherapy

Therapeutic services provided via technological platforms, such as online, mobile apps, or virtual reality, to improve mental health.

Mental Health Professionals

Trained individuals who provide services aimed at improving an individual's mental health and well-being.

Deinstitutionalization

The policy or process of reducing the population of mental health hospitals and transferring care to community-based settings.

Community Mental Health Programs

Initiatives or services provided at a community level to support individuals with mental health challenges, aiming to improve well-being and reduce stigma.