312-49 · Question #284
You are assisting in the investigation of a possible Web Server hack. The company who called you stated that customers reported to them that whenever they entered the web address of the company in…
The correct answer is B. DNS Poisoning. DNS Poisoning (also called DNS Cache Poisoning or DNS Spoofing) is the attack where malicious or forged DNS records are injected into a resolver's cache. When users query the poisoned DNS server, they are directed to a fake IP address instead of the legitimate one, even though…
Question
You are assisting in the investigation of a possible Web Server hack. The company who called you stated that customers reported to them that whenever they entered the web address of the company in their browser, what they received was a pornographic web site. The company checked the web server and nothing appears wrong. When you type in the IP address of the web site in your browser everything appears normal. What is the name of the attack that affects the DNS cache of the name resolution servers, resulting in those servers directing users to the wrong web site?
Options
- AARP Poisoning
- BDNS Poisoning
- CHTTP redirect attack
- DIP Spoofing
How the community answered
(65 responses)- A2% (1)
- B86% (56)
- C3% (2)
- D9% (6)
Explanation
DNS Poisoning (also called DNS Cache Poisoning or DNS Spoofing) is the attack where malicious or forged DNS records are injected into a resolver's cache. When users query the poisoned DNS server, they are directed to a fake IP address instead of the legitimate one, even though they typed the correct URL. Since the company's web server itself was fine and the issue only occurred via domain name (not direct IP access), this confirms the DNS cache was the target. ARP Poisoning affects Layer 2, HTTP redirect is server-side, and IP Spoofing is a different technique.
Topics
Community Discussion
No community discussion yet for this question.