Question 1

What DNS-based attacks should security teams watch for?

Accepted Answer

Common DNS attacks include DNS spoofing/cache poisoning (returning false records), DNS tunneling (exfiltrating data through DNS queries), DNS amplification DDoS (using open resolvers to flood targets), domain hijacking, typosquatting, and fast-flux networks that rapidly change DNS records to hide malicious infrastructure. Monitoring DNS traffic is essential for detecting these threats.

Question 2

How do DNS records play a role in email security?

Accepted Answer

DNS records are fundamental to email authentication. SPF (TXT records) specifies which servers can send email for a domain, DKIM uses TXT records to store public keys for message signing verification, and DMARC defines how receivers should handle authentication failures. MX records direct mail flow. Properly configured DNS records prevent email spoofing and phishing.

DNS Detective

How to play

Frequently Asked Questions