Some clients of TPNQM SA were redirected to a malicious site when they tried to access the TPNQM main site. Bob, a system administrator at TPNQM SA, found that they were victims of DNS Cache Poisoning. What should Bob recommend to deal with such a threat?

Question

Accepted Answer

B. The use of DNSSEC DNSSEC (Domain Name System Security Extensions) adds digital signatures to DNS records, allowing resolvers to verify that responses are authentic and have not been tampered with. This directly addresses cache poisoning because a forged DNS response will fail signature validation and be rejected by DNSSEC-aware resolvers.

Answer

A. The use of security agents in clients' computers Security agents on client computers operate above the DNS layer and cannot detect or prevent a poisoned DNS response being returned by the resolver before the connection is established.

Answer

C. The use of double-factor authentication Double-factor authentication secures user login credentials but has no effect on the DNS resolution process that redirects users before authentication even occurs.

Answer

D. Client awareness Client awareness can reduce risk from phishing but cannot technically prevent a DNS resolver from caching and serving a poisoned record to clients.

Some clients of TPNQM SA were redirected to a malicious site when they tried to access the TPNQM main site. Bob, a system administrator at TPNQM SA, found that they were victims of DNS Cache Poisoning

Question

Options

How the community answered

Why each option

Topics

Community Discussion