In which of the following attacking methods does an attacker distribute incorrect IP address?

IP spoofing involves forging the source IP address field in packet headers to impersonate another host, which is distinct from poisoning DNS records to redirect domain resolution.

MAC flooding overwhelms a switch's CAM table with fake MAC addresses to degrade it to hub behavior, which is a Layer 2 attack unrelated to distributing incorrect IP addresses.

Man-in-the-middle describes a broad class of interception attacks where the attacker relays communications between two parties; it does not specifically define the mechanism of distributing incorrect IP addresses through DNS.

DNS cache poisoning works by inserting forged DNS response records into a recursive resolver's cache so that legitimate domain name queries return attacker-controlled IP addresses. This directly matches the description of distributing incorrect IP addresses - the victim's machine resolves a valid hostname to a malicious IP without detecting the tampering. The attack exploits the stateless, unauthenticated nature of traditional DNS.