NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials - Question #3 Discussion

You receive a FortiAnalyzer alert warning that a 1 TB disk filled up in a day. Upon investigation, you find thousands of unusual DNS log requests, such as JHCMQK.website.com, with no answers. You later discover that DNS exfiltration is occurring through both UDP and TLS. How can you prevent this data theft technique? (Choose one answer)

• A. Enable DNS filter to protect against DNS exfiltration.
• B. Enable data loss prevention (DLP) to prevent DNS exfiltration.
• C. Use an intrusion prevention system (IPS) profile and DNS exfiltration-related signatures.
• D. Use a file filter profile to protect against DNS exfiltration.

Brave-Dump Community Votes