MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Which protocol is used by DNS over HTTPS (DoH) to transmit DNS queries securely?
a. HTTP
b. HTTPS
c. SSH
d. FTP
Answer: b. HTTPSindusface+1
What main vulnerability does DoH address compared to traditional DNS?
a. Phishing attacks
b. Unencrypted DNS queries
c. Server downtime
d. Slow network speeds
Answer: b. Unencrypted DNS queriesdevelopers.cloudflare+1
Which port does DoH typically use for encrypted DNS traffic?
a. 80
b. 8080
c. 443
d. 53
Answer: c. 443catchpoint+1
What happens to DNS queries when using DoH?
a. Queries are encrypted and hidden within HTTPS traffic
b. Queries are compressed
c. Queries are broadcasted
d. Queries are ignored
Answer: a. Queries are encrypted and hidden within HTTPS trafficindusface+1
Which popular web browser was among the first to support DoH?
a. Google Chrome
b. Safari
c. Mozilla Firefox
d. Internet Explorer
Answer: c. Mozilla Firefoxvaronis+1
DNS over HTTPS prevents which type of attack by hiding DNS queries?
a. DDoS attack
b. Man-in-the-middle attack
c. SQL injection
d. Social engineering
Answer: b. Man-in-the-middle attackumbrella.cisco+1
What is a notable performance challenge for DoH compared to standard DNS queries over UDP?
a. Lower bandwidth usage
b. Higher latency due to HTTPS connection establishment
c. Less compatibility with mobile devices
d. Reduced DNS cache efficiency
Answer: b. Higher latency due to HTTPS connection establishmentcatchpoint+1
Which entity can no longer easily see your DNS queries if you use DoH?
a. Internet Service Provider (ISP)
b. Cloud administrator
c. Remote desktop user
d. Local system administrator
Answer: a. Internet Service Provider (ISP)umbrella.cisco+1
What risk does DoH present to enterprise network administrators?
a. Easier compliance monitoring
b. Reduced ability to filter or monitor DNS traffic
c. Enhanced malware detection
d. Automatic firewall updates
Answer: b. Reduced ability to filter or monitor DNS trafficheimdalsecurity+1
Which one is a common use case for DoH in cloud environments?
a. Enabling legacy server communication
b. Circumventing local DNS-based censorship
c. Disabling HTTPS encryption
d. Lowering firewall security
Answer: b. Circumventing local DNS-based censorshipindusface+1
In a traditional DNS system, queries are sent using which protocol?
a. HTTPS
b. UDP
c. SMTP
d. TCP/IP only
Answer: b. UDPdevelopers.cloudflare+1
Which organization standardized DoH in RFC 8484?
a. IEEE
b. IETF
c. ISO
d. ITU-T
Answer: b. IETFvaronis
How does DoH improve user privacy in cloud computing?
a. By masking IP addresses
b. By encrypting DNS requests
c. By removing DNS logs
d. By disabling cookies
Answer: b. By encrypting DNS requestsdevelopers.cloudflare+1
What is a limitation of DoH in cloud server environments?
a. Improved malware detection
b. Can hide command & control (C2) channels for attackers
c. Reduces network latency
d. Increases compatibility with legacy devices
Answer: b. Can hide command & control (C2) channels for attackersheimdalsecurity+1
Which DNS record type does DoH resolve?
a. MX
b. PTR
c. A
d. TXT
Answer: c. Aindusface+1
Why do ISPs oppose widespread adoption of DoH?
a. Increases cost of bandwidth
b. Obscures user browsing habits
c. Decreases device performance
d. Requires more routers
Answer: b. Obscures user browsing habitsumbrella.cisco+1
What fallback method do systems use if DoH fails?
a. UDP-based DNS query
b. SFTP query
c. HTTP request
d. SMTP request
Answer: a. UDP-based DNS querycyberfox+1
In a corporate cloud environment, what is a major challenge with DoH?
a. Simplified compliance reporting
b. Difficulty tracking harmful domain queries
c. Enhanced network throughput
d. Lower risk of phishing
Answer: b. Difficulty tracking harmful domain queriessciencedirect+1
Which statement describes DoH’s compatibility with traditional DNS firewalls?
a. Enhances monitoring
b. Hides queries from firewalls
c. Automatically updates DNS blacklists
d. Disables HTTPS checking
Answer: b. Hides queries from firewallscyberfox+1
What is NOT a benefit of DoH?
a. Encryption of DNS traffic
b. Improved privacy
c. Automatic malware detection
d. Prevention of DNS spoofing
Answer: c. Automatic malware detectiondevelopers.cloudflare+1
What information do traditional DNS queries expose?
a. Only resolved IP addresses
b. Domain names in plaintext
c. Server OS version
d. Network location
Answer: b. Domain names in plaintextcyberfox+1
Why might network visibility decrease with DoH deployment?
a. DNS data remains local
b. Encrypted queries obscure monitoring tools
c. Queries use IPv6 exclusively
d. No impact on visibility
Answer: b. Encrypted queries obscure monitoring toolssciencedirect+1
What is a typical cloud DoH provider?
a. Netflix CDN
b. AWS Route 53
c. Apache Kafka
d. IBM Watson
Answer: b. AWS Route 53indusface
When DNS filtering is required, what risk does DoH present?
a. Blocking malicious domains is easier
b. DNS filtering tools may be bypassed
c. Firewall logs are extended
d. Network speed drops
Answer: b. DNS filtering tools may be bypassedheimdalsecurity+1
What do DoH queries look like to network traffic analyzers?
a. Unencrypted UDP packets
b. Regular HTTPS requests
c. Compressed SMTP traffic
d. IPv6 multicast packets
Answer: b. Regular HTTPS requestscatchpoint+1
What mechanism does DoH use to check server authenticity?
a. Server password
b. Public/private key pairs
c. TLS/SSL certificate validation
d. MAC address lookup
Answer: c. TLS/SSL certificate validationdevelopers.cloudflare+1
Which group benefits most from DoH privacy?
a. Cybercriminals alone
b. Regular users and businesses
c. Malware developers
d. DNS server hosts
Answer: b. Regular users and businesseszscaler+1
Which setting enables DoH in Google Chrome?
a. “Private mode”
b. “Incognito network”
c. “Use secure DNS”
d. “Enable DoT”
Answer: c. “Use secure DNS”indusface
What is a key difference between DoT and DoH?
a. DoT uses port 443
b. DoH wraps DNS in HTTP/HTTPS requests
c. DoH has less encryption
d. DoT can hide C2 channels
Answer: b. DoH wraps DNS in HTTP/HTTPS requestscatchpoint+1
What technical standard limits traditional DNS tracking capability?
a. RFC 1034
b. IEEE 802.3
c. ISO 27001
d. ITU-T Y.3500
Answer: a. RFC 1034cyberfox
Which risk arises if DoH is implemented without proper endpoint controls?
a. Loss of compliance enforcement
b. Improved access control
c. Enhanced antivirus scanning
d. Reduced HTTPS traffic
Answer: a. Loss of compliance enforcementzscaler+1
Where are DoH configurations typically set in cloud environments?
a. Network adapter settings
b. Application (browser) level
c. CPU BIOS
d. Storage controller
Answer: b. Application (browser) levelvaronis+1
How does DoH affect DNS-based cyber threat detection?
a. Improves detection rates
b. Reduces visibility for threat monitoring tools
c. Automates threat response
d. Has no effect on detection
Answer: b. Reduces visibility for threat monitoring toolssciencedirect+1
What is a recommended action before deploying DoH enterprise-wide in a cloud environment?
a. Disable firewall monitoring
b. Check compatibility with cybersecurity tools
c. Remove all DNS logs
d. Install legacy DNS servers
Answer: b. Check compatibility with cybersecurity toolsheimdalsecurity
What is the fallback identifier for DoH traffic in agent-enhanced cloud environments?
a. UUID (device-specific)
b. MAC address
c. IPv4 address only
d. Hostname lookup
Answer: a. UUID (device-specific)cyberfox
Which of the following is a valid impact of centralizing DNS traffic with third-party DoH providers?
a. Decreased privacy risk
b. Increased visibility for enterprise networks
c. Privacy concerns due to data centralization
d. Exclusive compatibility with cloud-native apps
Answer: c. Privacy concerns due to data centralizationindusface
Which is true about DoH request tracking compared to IP-based tracking?
a. Requests use only IP addresses
b. Each request uses either IP or UUID, not both
c. Requests use MAC address
d. Requests are never traced
Answer: b. Each request uses either IP or UUID, not bothcyberfox
What cloud-native solution provides Zero Trust DNS security and performance with DoH?
a. Apache Cassandra
b. Zscaler Zero Trust Exchange
c. Oracle Cloud Analytics
d. Google Workspace
Answer: b. Zscaler Zero Trust Exchangezscaler
What type of network traffic does DoH encapsulate DNS queries into?
a. FTP packets
b. SMTP messages
c. HTTPS requests
d. SFTP transfers
Answer: c. HTTPS requestsdevelopers.cloudflare+1
Which RFC defines DoH?
a. RFC 8484
b. RFC 5321
c. RFC 1034
d. RFC 3490
Answer: a. RFC 8484varonis
Which cyber threat leveraged DoH for covert communication?
a. Godlua DDoS bot for Linux
b. Zeus banking trojan
c. WannaCry ransomware
d. Stuxnet worm
Answer: a. Godlua DDoS bot for Linuxheimdalsecurity
What does DoH use to resolve the resolver’s domain before switching to full encryption?
a. HTTP HEAD query
b. Traditional DNS query for the provider’s domain
c. DNSSEC
d. TLS handshake alone
Answer: b. Traditional DNS query for the provider’s domainvaronis
Why might DoH be preferred over DoT by privacy advocates?
a. Uses dedicated port for easy blocking
b. Hides DNS queries within standard HTTPS traffic
c. Supports only IPv4
d. Requires special browser extensions
Answer: b. Hides DNS queries within standard HTTPS trafficcatchpoint+1
In what way can DoH negatively impact cloud-based malware detection?
a. Prevents malware downloads
b. Obscures DNS traffic used by malware C2 channels
c. Improves endpoint scanning
d. Increases HTTPS filtering success
Answer: b. Obscures DNS traffic used by malware C2 channelsvaronis+1
What is a major privacy gain for individuals using DoH?
a. No DNS logs are generated
b. Hides domain queries from ISPs and third parties
c. Provides exclusive access to encrypted websites
d. Increases email encryption
Answer: b. Hides domain queries from ISPs and third partiesumbrella.cisco+1
Which setting enables DoH system-wide on Windows 11?
a. Device Manager
b. Control Panel > Network
c. DNS settings in Windows
d. Firewall settings
Answer: c. DNS settings in Windowsvaronis+1
What must be considered when using third-party DoH services for cloud DNS?
a. Server latency only
b. Privacy and data logging practices
c. Automatic server updates
d. Device hardware version
Answer: b. Privacy and data logging practiceszscaler+1
What is the most restrictive method for DNS-based traffic filtering when DoH is enabled?
a. Domain blacklist via UDP
b. HTTPS packet inspection
c. MAC address filtering
d. Hostname pattern matching
Answer: b. HTTPS packet inspectionsciencedirect+1
Which protocol replaced the transport of plain DNS queries with an encrypted alternative in DoH?
a. TCP/IP
b. HTTPS (with HTTP/2 support)
c. FTP
d. Telnet
Answer: b. HTTPS (with HTTP/2 support)catchpoint+1
What should cloud administrators do to ensure security when deploying DoH?
a. Ignore DNS traffic logs
b. Integrate endpoint DNS security with DoH support
c. Rely on ISP DNS filtering
d. Increase server CPU speed
Answer: b. Integrate endpoint DNS security with DoH supportzscaler+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info