PSAP

TCM Security Practical SOC Analyst Professional (PSAP)

Anomaly DetectionEnglish
Exam overview

Practice session

An analyst reviews Splunk logs and notices a spike in outbound DNS queries from a single endpoint to randomized 30-character subdomains of a single apex domain. What technique does this most likely indicate?

Loading your practice session…