Examkin

Soru

Zorluk: KolayCommon Network Attack Types and Vectors

A network technician discovers that queries sent to the local DNS server for a company intranet portal are resolving to an unauthorized external IP address due to corrupted cache entries. Which network attack vector does this scenario describe?

  1. DNS poisoningCevap
  2. B
    ARP cache poisoning
  3. C
    Port scanning
  4. D
    DNS MX record misconfiguration

Cevap

DNS poisoning
DNS poisoning directly targets the DNS caching mechanism by inserting invalid IP mappings into the resolver's store, forcing clients requesting domain lookups to connect to an attacker-controlled endpoint.

Adım Adım Çözüm

1
Analyze the reported symptom in the scenario
Domain name resolution requests are being diverted to an unauthorized IP address because false entries were stored in the DNS server cache.
Identifying where the manipulation occurs (Layer 7 DNS cache vs Layer 2 ARP cache) is critical for determining the attack vector.
2
Match the mechanism to the correct attack classification
Injecting fraudulent IP mappings into a DNS caching resolver is defined as DNS cache poisoning.
This mechanism manipulates name resolution services to misdirect client connection requests.

Anahtar Kavram

DNS Cache Poisoning
Bu soruyu puanla

Konular

Common Network Attack Types and Vectors

Bu konudan daha fazla soru