Based on the Attacks Risk Report, DNS is associated with a high number of impact events (16). DNS traffic is critical for network operations but can also be exploited for malicious activities such as DNS tunneling, DDoS attacks, and data exfiltration. To improve security, the security engineer should focus on inspecting DNS traffic. This involves deploying DNS security solutions and monitoring DNS traffic for anomalies to detect and mitigate potential threats.
Steps:
* Implement DNS security tools such as DNS filtering, DNSSEC, and DNS anomaly detection.
* Configure the firewall to inspect DNS traffic for malicious activities.
* Regularly analyze DNS logs to identify and respond to threats.
This action addresses a significant risk identified in the report and helps to mitigate potential attacks exploiting DNS.
References:Cisco Secure Firewall Management Center Administrator Guide, Chapter on DNS Security and Traffic Inspection.

Packet Tracer will not show that packet comes to FTD. We need to capture relevant traffic.
https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with- firepower-threat-defense-f.html#anc16