SY0-501 · Question #212
Before an infection was detected, several of the infected devices attempted to access a URL that was similar to the company name but with two letters transported. Which of the following BEST…
The correct answer is C. Typo squatting. The attack involved devices attempting to access a URL with transposed letters, indicative of a domain registered to exploit common typographical errors.
Question
Before an infection was detected, several of the infected devices attempted to access a URL that was similar to the company name but with two letters transported. Which of the following BEST describes the attack vector used to infect the devices?
Options
- ACross-site scripting
- BDNS poisoning
- CTypo squatting
- DURL hijacking
How the community answered
(59 responses)- A3% (2)
- B8% (5)
- C71% (42)
- D17% (10)
Why each option
The attack involved devices attempting to access a URL with transposed letters, indicative of a domain registered to exploit common typographical errors.
Cross-site scripting (XSS) is a web security vulnerability where attackers inject malicious client-side scripts into web pages viewed by other users, typically exploiting vulnerabilities within a legitimate website itself, not a separate typo-ridden domain.
DNS poisoning involves corrupting the DNS cache on a server or client, causing it to return an incorrect IP address for a legitimate domain name, which is different from a user directly navigating to a maliciously registered, similarly named domain.
Typo squatting, also known as URL hijacking or domain squatting, involves registering domain names that are slight misspellings or common typographical errors of legitimate, well-known websites. The goal is to capitalize on users making typing mistakes, leading them to a malicious site (often hosting malware or phishing content) instead of the intended destination. The scenario perfectly describes this by mentioning a URL "similar to the company name but with two letters transposed".
URL hijacking is a broader term often used interchangeably with typo squatting, but typo squatting specifically highlights the exploitation of typographical errors as described by the "two letters transposed" in the question, making it the most precise answer.
Concept tested: Typo squatting and social engineering
Source: https://www.icann.org/resources/pages/typosquatting-2012-02-24-en
Topics
Community Discussion
No community discussion yet for this question.