nerdexam
CompTIA

220-1002 · Question #668

A user is having trouble accessing websites on a computer. A technician troubleshoots and tries to access a site the user typically visits but is instead presented with a completely different site…

The correct answer is A. Clear the DNS cache and check the hosts file. Being redirected to a completely different website instead of the intended one is a classic indicator of DNS cache poisoning or a modified hosts file, both of which should be investigated first.

Networking

Question

A user is having trouble accessing websites on a computer. A technician troubleshoots and tries to access a site the user typically visits but is instead presented with a completely different site. Which of the fallowing should the technician do NEXT?

Options

  • AClear the DNS cache and check the hosts file.
  • BVerify the default gateway settings are correct.
  • CEnsure the outbound firewall rules are accurate.
  • DConfigure the workstation for IPV6.

How the community answered

(59 responses)
  • A
    78% (46)
  • B
    7% (4)
  • C
    12% (7)
  • D
    3% (2)

Why each option

Being redirected to a completely different website instead of the intended one is a classic indicator of DNS cache poisoning or a modified hosts file, both of which should be investigated first.

AClear the DNS cache and check the hosts file.Correct

Clearing the DNS cache removes any poisoned or stale DNS entries that may be resolving domain names to incorrect IP addresses. Checking the hosts file is equally important because malware commonly modifies it to statically redirect specific domains to attacker-controlled servers. Together, these two checks address the most common technical mechanisms behind browser redirection attacks.

BVerify the default gateway settings are correct.

An incorrect default gateway would affect all network connectivity broadly, not selectively redirect one specific website to a different destination.

CEnsure the outbound firewall rules are accurate.

Outbound firewall rule issues would block access to a site entirely rather than redirect the user to a different website.

DConfigure the workstation for IPV6.

Configuring IPv6 is unrelated to DNS poisoning or hosts file manipulation and would have no effect on a redirection issue.

Concept tested: DNS cache poisoning and hosts file hijacking detection

Source: https://learn.microsoft.com/en-us/windows-server/networking/dns/troubleshoot/troubleshoot-dns-client

Topics

#DNS cache#hosts file#DNS hijacking#network troubleshooting

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice