SAL2

TryHackMe Security Analyst Level 2 (SAL2)

Network Traffic AnalysisEnglish
Exam overview

Practice session

In a Wireshark capture, an analyst observes a host sending DNS TXT record queries for long, randomized subdomain strings of 60+ characters under a single parent domain at a rate of 20 queries per minute. What is the most likely malicious activity?

Loading your practice session…