nerdexam
EC-Council

312-50V9 · Question #257

An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS server and NTP server because of the importance of their job. The attacker gains Now…

The correct answer is C. DNS spoofing. DNS spoofing involves corrupting DNS resolution so that legitimate domain queries return attacker-controlled IP addresses, redirecting victims transparently.

Hacking Web Servers

Question

An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS server and NTP server because of the importance of their job. The attacker gains Now when the employees of the office want to go to Google they are being redirected to the attacker machine. What is the name of this kind of attack?

Options

  • AARP Poisoning
  • BSmurf Attack
  • CDNS spoofing
  • DMAC Flooding

How the community answered

(41 responses)
  • A
    7% (3)
  • B
    2% (1)
  • C
    88% (36)
  • D
    2% (1)

Why each option

DNS spoofing involves corrupting DNS resolution so that legitimate domain queries return attacker-controlled IP addresses, redirecting victims transparently.

AARP Poisoning

ARP poisoning manipulates Layer 2 ARP caches to redirect traffic on the local segment, not DNS name resolution.

BSmurf Attack

A Smurf attack is an ICMP-based amplification DDoS attack and does not redirect web browsing traffic.

CDNS spoofingCorrect

In DNS spoofing, an attacker compromises or poisons DNS records so that when a client resolves a hostname such as google.com, the DNS server returns the attacker's IP instead of the legitimate one. Because the office uses its own DNS server and the attacker gained control of it, all internal DNS responses can be manipulated. This is distinct from cache poisoning in that the authoritative server itself is compromised, but the result - redirected traffic - is the defining characteristic of DNS spoofing.

DMAC Flooding

MAC flooding overwhelms a switch's CAM table to force broadcast behavior, enabling sniffing, but does not redirect DNS queries.

Concept tested: DNS spoofing attack and traffic redirection

Source: https://www.cisa.gov/news-events/alerts/2019/01/16/dns-infrastructure-tampering

Topics

#DNS spoofing#traffic redirection#DNS poisoning#DNS hijacking

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice