nerdexam
EC-Council

312-50V9 · Question #272

In both pharming and phishing attacks an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims. What is…

The correct answer is A. In a pharming attack a victim is redirected to a fake website by modifying their host configuration. Pharming and phishing both use fake websites to steal credentials, but pharming silently redirects victims via DNS or host file manipulation while phishing relies on deceiving users into clicking fraudulent links.

Social Engineering

Question

In both pharming and phishing attacks an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its victims. What is the difference between pharming and phishing attacks?

Options

  • AIn a pharming attack a victim is redirected to a fake website by modifying their host configuration
  • BBoth pharming and phishing attacks are purely technical and are not considered forms of social
  • CBoth pharming and phishing attacks are identical.
  • DIn a phishing attack a victim is redirected to a fake website by modifying their host configuration

How the community answered

(29 responses)
  • A
    76% (22)
  • B
    14% (4)
  • C
    3% (1)
  • D
    7% (2)

Why each option

Pharming and phishing both use fake websites to steal credentials, but pharming silently redirects victims via DNS or host file manipulation while phishing relies on deceiving users into clicking fraudulent links.

AIn a pharming attack a victim is redirected to a fake website by modifying their host configurationCorrect

In a pharming attack, the attacker corrupts DNS records or modifies the victim's hosts file so that a legitimate domain name resolves to a malicious IP address, redirecting the victim even when they type the correct URL manually. This DNS-level or host-level redirection is the core technical distinction separating pharming from phishing. Phishing, by contrast, depends on social engineering to trick users into clicking a fraudulent link delivered via email or messaging.

BBoth pharming and phishing attacks are purely technical and are not considered forms of social

Phishing is fundamentally a social engineering attack that manipulates users through deceptive emails or messages, making this claim that it is purely technical incorrect.

CBoth pharming and phishing attacks are identical.

Pharming and phishing are distinct attack categories that use different redirection mechanisms, so claiming they are identical is technically incorrect.

DIn a phishing attack a victim is redirected to a fake website by modifying their host configuration

Host configuration modification (DNS or hosts file tampering) is the defining technique of pharming, not phishing - phishing uses deceptive communications to lure victims rather than silently hijacking their DNS resolution.

Concept tested: Pharming vs phishing attack mechanisms and differences

Source: https://www.cisa.gov/news-events/news/understanding-phishing

Topics

#pharming#phishing#DNS poisoning#host file modification

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice