Cert Master

KT-NET DNS tunneling

Exfil over DNS encodes data in TXT queries. BEST mitigation layer?

Multiple choice — select one answer

Answer choices

  1. a. Recursive resolver policies and egress filtering to approved resolvers only
  2. b. Email logs to personal accounts, without security or identity team coordination per policy.
  3. c. Remove all firewalls, without security or identity team coordination per policy.
  4. d. Block TCP 443 instead only, without security or identity team coordination per policy.

Architectural breakdown & explanation

Forcing resolvers and monitoring TXT queries limits tunnel egress.

Correct answer(s): a. Recursive resolver policies and egress filtering to approved resolvers only

Exam domain: DNS tunneling (16% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Network Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications