nerdexam
CompTIA

SY0-501 · Question #212

Before an infection was detected, several of the infected devices attempted to access a URL that was similar to the company name but with two letters transported. Which of the following BEST…

The correct answer is C. Typo squatting. The attack involved devices attempting to access a URL with transposed letters, indicative of a domain registered to exploit common typographical errors.

Submitted by alyssa_d· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

Before an infection was detected, several of the infected devices attempted to access a URL that was similar to the company name but with two letters transported. Which of the following BEST describes the attack vector used to infect the devices?

Options

  • ACross-site scripting
  • BDNS poisoning
  • CTypo squatting
  • DURL hijacking

How the community answered

(59 responses)
  • A
    3% (2)
  • B
    8% (5)
  • C
    71% (42)
  • D
    17% (10)

Why each option

The attack involved devices attempting to access a URL with transposed letters, indicative of a domain registered to exploit common typographical errors.

ACross-site scripting

Cross-site scripting (XSS) is a web security vulnerability where attackers inject malicious client-side scripts into web pages viewed by other users, typically exploiting vulnerabilities within a legitimate website itself, not a separate typo-ridden domain.

BDNS poisoning

DNS poisoning involves corrupting the DNS cache on a server or client, causing it to return an incorrect IP address for a legitimate domain name, which is different from a user directly navigating to a maliciously registered, similarly named domain.

CTypo squattingCorrect

Typo squatting, also known as URL hijacking or domain squatting, involves registering domain names that are slight misspellings or common typographical errors of legitimate, well-known websites. The goal is to capitalize on users making typing mistakes, leading them to a malicious site (often hosting malware or phishing content) instead of the intended destination. The scenario perfectly describes this by mentioning a URL "similar to the company name but with two letters transposed".

DURL hijacking

URL hijacking is a broader term often used interchangeably with typo squatting, but typo squatting specifically highlights the exploitation of typographical errors as described by the "two letters transposed" in the question, making it the most precise answer.

Concept tested: Typo squatting and social engineering

Source: https://www.icann.org/resources/pages/typosquatting-2012-02-24-en

Topics

#typosquatting#URL hijacking#social engineering#malware delivery

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice