Examkin

Question

Difficulty: EasyCommon Network Attack Types and Vectors

A network technician discovers that queries sent to the local DNS server for a company intranet portal are resolving to an unauthorized external IP address due to corrupted cache entries. Which network attack vector does this scenario describe?

  1. DNS poisoningAnswer
  2. B
    ARP cache poisoning
  3. C
    Port scanning
  4. D
    DNS MX record misconfiguration

Answer

DNS poisoning
DNS poisoning directly targets the DNS caching mechanism by inserting invalid IP mappings into the resolver's store, forcing clients requesting domain lookups to connect to an attacker-controlled endpoint.

Step-by-Step Solution

1
Analyze the reported symptom in the scenario
Domain name resolution requests are being diverted to an unauthorized IP address because false entries were stored in the DNS server cache.
Identifying where the manipulation occurs (Layer 7 DNS cache vs Layer 2 ARP cache) is critical for determining the attack vector.
2
Match the mechanism to the correct attack classification
Injecting fraudulent IP mappings into a DNS caching resolver is defined as DNS cache poisoning.
This mechanism manipulates name resolution services to misdirect client connection requests.

Key Concept

DNS Cache Poisoning
Rate this question

Topics

Common Network Attack Types and Vectors

More questions from this topic