From the log excerpt, which line indicates a DNS version query?

From the log excerpt, which line indicates a DNS version query?

• A. Apr 24 14:46:46 [4663]: spp_portscan: portscan detected from 194.222.156.169
• B. Apr 24 18:01:05 [4663]: IDS/DNS-version-query: 212.244.97.121:3485 -> 172.16.1.107:53
• C. Apr 25 08:02:41 [5875]: spp_portscan: PORTSCAN DETECTED from 24.9.255.53
• D. Apr 25 02:38:17 [5875]: IDS/RPC-rpcinfo-query: 212.251.1.94:642 -> 172.16.1.107:111

Answer: (B)

Looking for a DNS version query means identifying a log line that explicitly shows a DNS version-related request and uses the DNS service port. The line in question literally says IDS/DNS-version-query, which tells you the event type is a DNS version probe. It also shows traffic from 212.244.97.121:3485 directed to 172.16.1.107:53. Port 53 is the standard DNS port, so the destination is a DNS service. This combination—the label indicating a DNS version query and the DNS port involved—confirms that this line is describing a DNS version query. The other entries describe port scans or RPC queries, which are unrelated to DNS version probing.

Looking for a DNS version query means identifying a log line that explicitly shows a DNS version-related request and uses the DNS service port. The line in question literally says IDS/DNS-version-query, which tells you the event type is a DNS version probe. It also shows traffic from 212.244.97.121:3485 directed to 172.16.1.107:53. Port 53 is the standard DNS port, so the destination is a DNS service. This combination—the label indicating a DNS version query and the DNS port involved—confirms that this line is describing a DNS version query. The other entries describe port scans or RPC queries, which are unrelated to DNS version probing.