312-50V9 · Question #257
An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS server and NTP server because of the importance of their job. The attacker gains Now…
The correct answer is C. DNS spoofing. DNS spoofing involves corrupting DNS resolution so that legitimate domain queries return attacker-controlled IP addresses, redirecting victims transparently.
Question
An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS server and NTP server because of the importance of their job. The attacker gains Now when the employees of the office want to go to Google they are being redirected to the attacker machine. What is the name of this kind of attack?
Options
- AARP Poisoning
- BSmurf Attack
- CDNS spoofing
- DMAC Flooding
How the community answered
(41 responses)- A7% (3)
- B2% (1)
- C88% (36)
- D2% (1)
Why each option
DNS spoofing involves corrupting DNS resolution so that legitimate domain queries return attacker-controlled IP addresses, redirecting victims transparently.
ARP poisoning manipulates Layer 2 ARP caches to redirect traffic on the local segment, not DNS name resolution.
A Smurf attack is an ICMP-based amplification DDoS attack and does not redirect web browsing traffic.
In DNS spoofing, an attacker compromises or poisons DNS records so that when a client resolves a hostname such as google.com, the DNS server returns the attacker's IP instead of the legitimate one. Because the office uses its own DNS server and the attacker gained control of it, all internal DNS responses can be manipulated. This is distinct from cache poisoning in that the authoritative server itself is compromised, but the result - redirected traffic - is the defining characteristic of DNS spoofing.
MAC flooding overwhelms a switch's CAM table to force broadcast behavior, enabling sniffing, but does not redirect DNS queries.
Concept tested: DNS spoofing attack and traffic redirection
Source: https://www.cisa.gov/news-events/alerts/2019/01/16/dns-infrastructure-tampering
Topics
Community Discussion
No community discussion yet for this question.