Examkin

Question

Difficulty: MediumInformation Technology and Cybersecurity

With reference to cybersecurity protocols and network vulnerability vectors, consider the following statements:

1. DNS Cache Poisoning involves corrupting a Domain Name System resolver's cache so that requests for a legitimate domain redirect network traffic to an unauthorized server.
2. Domain Name System Security Extensions (DNSSEC) prevent spoofing by encrypting the data payload transferred between DNS clients and servers to ensure privacy.
3. Address Resolution Protocol (ARP) spoofing operates at Layer 2 (Data Link Layer) of the OSI model by broadcasting forged messages to associate an IP address with a malicious MAC address.

Which of the statements given above are correct?

  1. A
    1 and 2 only
  2. 1 and 3 onlyAnswer
  3. C
    2 and 3 only
  4. D
    1, 2 and 3

Answer

Statements 1 and 3 are correct.
The statement specifying '1 and 3 only' is correct. Statement 1 accurately defines DNS cache poisoning as a mechanism to hijack DNS lookups. Statement 3 correctly identifies that ARP spoofing functions at Layer 2 (Data Link Layer) of the OSI model. Statement 2 is incorrect because DNSSEC provides cryptographic authentication and integrity verification through digital signatures; it does not provide encryption or payload confidentiality.

Step-by-Step Solution

1
Evaluate Statement 1 regarding DNS Cache Poisoning
Statement 1 is correct.
DNS cache poisoning introduces false address records into a DNS resolver's cache, causing it to return an incorrect IP address and diverting traffic to a malicious website.
2
Evaluate Statement 2 regarding DNSSEC functionality
Statement 2 is incorrect.
DNSSEC adds cryptographic signatures to existing DNS records to verify data origin and integrity. It does NOT encrypt the data payload or provide confidentiality/privacy for DNS queries (which is handled by DNS over HTTPS or DNS over TLS).
3
Evaluate Statement 3 regarding ARP Spoofing OSI layer and mechanism
Statement 3 is correct.
Address Resolution Protocol (ARP) works at the Data Link Layer (Layer 2) to resolve IP addresses to MAC addresses on local area networks. ARP spoofing sends forged ARP responses to map a legitimate IP to an attacker's MAC address.

Key Concept

Cybersecurity Threats and Protocol Vulnerabilities (DNS Cache Poisoning, DNSSEC authentication vs encryption, ARP Spoofing)
Estimated Time:1m 30s
Rate this question

Topics

Information Technology and Cybersecurity

More questions from this topic