Beginner

DNS, Network Protocols and Security

This course covered the DNS protocol from a security practitioner's perspective, progressing from fundamental query/response mechanics to traffic manipulation and, finally, to detecting s...

This course introduces the foundational concepts of the Domain Name System (DNS) protocol, how it functions in practice, and the security-relevant behaviors that every practitioner working in a security role should understand. DNS is a deceptively complex protocol, and while its core concept is simple, real depth emerges once caching, resolution chains, and adversarial abuse are considered. This material walks through the core functionality of the protocol and highlights concepts that every security practitioner should be aware of.

Domain Name System (DNS) is a complicated protocol with quite a bit of depth. Even though the fundamental concept is simple, do not be surprised to find yourself still learning new things about DNS behavior deep into a cybersecurity career.

At its core, DNS solves one problem: when a computer browses to a web address such as pluralsight.com, the operating system needs to convert that human-readable domain name into an IP address that can actually be routed on the network. DNS is the protocol that accomplishes this translation.

Sign in to read this course

A free account unlocks all 514 courses. 20 are readable without one.

What's inside

5 sections
  1. 1 Table of Contents
  2. 2 Module 1: DNS Queries and Responses
  3. 3 Module 2: Modifying Traffic Flow
  4. 4 Module 3: Detecting DNS Command-and-Control (C2)
  5. 5 Summary

Interested in this course?

Contact us to book it or get a custom training plan for your team.