N10-009 Question #265: Real Exam Question with Answer & Explanation

Question

A user attempts to log in to a corporate website by utilizing a shortcut. The shortcut has been used many times before. The user then notices some discrepancies on the company website. Which of the following is most likely the reason for this issue?

Options

• AVLAN hopping
• BARP spoofing
• CDNS poisoning
• DMAC flooding

Explanation

A user notices discrepancies on a corporate website accessed via a previously valid shortcut, indicating a potential redirection to an illegitimate site.

Common mistakes.

• A. VLAN hopping is an attack that allows traffic from one VLAN to access another VLAN, disrupting network segmentation, but it does not directly alter DNS resolution or redirect a user to a fraudulent website.
• B. ARP spoofing (or ARP poisoning) associates an attacker's MAC address with a legitimate IP address on a local network, primarily to intercept local traffic, not to redirect a user to a fraudulent website via a public DNS resolution.
• D. MAC flooding attacks overwhelm a switch's MAC address table, forcing it to behave like a hub and broadcast all traffic, which degrades network performance but does not redirect users to a malicious website based on a URL.

Concept tested. DNS poisoning attack mechanism

Reference. https://learn.microsoft.com/en-us/windows-server/networking/dns/what-is-dns#dns-poisoning

No community discussion yet for this question.