SY0-701 Question 259

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  Since there is no evidence that the malicious URLs lead to a harmful site, the best course of action is to use a DNS sinkhole in order to collect more analysis.

• Chose D1

  D: Block the URL shortener domain in the web proxy It sounds like user error on the side of the attacker. Meaning they used the wrong domain. If you just send the dead domain to the DNS sinkhole you allow the attacker to correct their mistake and send another URL shortner with the correct malicious domain

• Chose B1

  Security world → an expired domain that attackers can re-register for malicious use.