CBRCOR Exam - Question 30

Question

Refer to the exhibit. What results from this script?

Examice · Accepted Answer

The given script checks if the provided seed domains in the 'seeds' list start with any of the generated subdomains. The function 'isBanjoriTail' generates different domains using the 'next_domain' function and checks if any of these generated domains are prefixes of the given seed domains. If any match is found, it returns False; otherwise, it returns True. Therefore, the script effectively checks the given seed domains against generated domain patterns.

CiscoTester · Answer

The code from the image is explained by cisco, it is B.
https://umbrella.cisco.com/blog/python

TOLU1985 · Answer

B is right.

27ea763 · Answer

I will go with C as well

Bobster02 · Answer

My choice is C.

TrainingTeam · Answer

The script provided in the exhibit is indicative of a Domain Generation Algorithm (DGA), which is commonly used by cyber threats to dynamically generate a large number of domain names. These domain names can serve as potential communication points with command and control (C2) servers. The script takes a list of seeds and applies a transformation to generate new domain names. It then checks these domains against a set of rules, such as not starting with "www." If a domain does not meet the specified criteria, it is flagged as a potential C2 domain. This process is crucial in cyber operations for identifying and mitigating threats that use DGAs for evasion and maintaining persistence.

CBRCOR Exam - Question 30

Discussion