An IT administrator has installed new DNS name servers (Primary and Secondary), which are used to host the company MX records and resolve the web server's public address. In order to secure the zone…

The correct answer is B. IP spoofing. ACLs on DNS servers restrict zone transfers based on the source IP address of incoming requests. IP spoofing allows an attacker to forge the source IP address of a packet to impersonate a trusted host - in this case, the primary DNS server or an authorized secondary. Since the…

Technical Integration of Enterprise Components

Question

An IT administrator has installed new DNS name servers (Primary and Secondary), which are used to host the company MX records and resolve the web server's public address. In order to secure the zone transfer between the primary and secondary server, the administrator uses only server ACLs. Which of the following attacks could the secondary DNS server still be susceptible to?

Options

AEmail spamming
BIP spoofing
CClickjacking
DDNS replication

How the community answered

(63 responses)

A
10% (6)
B
62% (39)
C
5% (3)
D
24% (15)

Explanation

ACLs on DNS servers restrict zone transfers based on the source IP address of incoming requests. IP spoofing allows an attacker to forge the source IP address of a packet to impersonate a trusted host - in this case, the primary DNS server or an authorized secondary. Since the only control is an IP-based ACL, a spoofed packet with the correct source IP could bypass the restriction and trigger an unauthorized zone transfer, exposing internal DNS records. Email spamming (A), clickjacking (C), and 'DNS replication' (D) are not relevant attack vectors against this specific ACL-only control.

Topics

#DNS zone transfer#IP spoofing#ACL limitations#DNS security

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice