Examkin

Soru

Zorluk: OrtaInformation Technology and Cybersecurity

With reference to cybersecurity protocols and network vulnerability vectors, consider the following statements:

1. DNS Cache Poisoning involves corrupting a Domain Name System resolver's cache so that requests for a legitimate domain redirect network traffic to an unauthorized server.
2. Domain Name System Security Extensions (DNSSEC) prevent spoofing by encrypting the data payload transferred between DNS clients and servers to ensure privacy.
3. Address Resolution Protocol (ARP) spoofing operates at Layer 2 (Data Link Layer) of the OSI model by broadcasting forged messages to associate an IP address with a malicious MAC address.

Which of the statements given above are correct?

  1. A
    1 and 2 only
  2. 1 and 3 onlyCevap
  3. C
    2 and 3 only
  4. D
    1, 2 and 3

Cevap

Statements 1 and 3 are correct.
The statement specifying '1 and 3 only' is correct. Statement 1 accurately defines DNS cache poisoning as a mechanism to hijack DNS lookups. Statement 3 correctly identifies that ARP spoofing functions at Layer 2 (Data Link Layer) of the OSI model. Statement 2 is incorrect because DNSSEC provides cryptographic authentication and integrity verification through digital signatures; it does not provide encryption or payload confidentiality.

Adım Adım Çözüm

1
Evaluate Statement 1 regarding DNS Cache Poisoning
Statement 1 is correct.
DNS cache poisoning introduces false address records into a DNS resolver's cache, causing it to return an incorrect IP address and diverting traffic to a malicious website.
2
Evaluate Statement 2 regarding DNSSEC functionality
Statement 2 is incorrect.
DNSSEC adds cryptographic signatures to existing DNS records to verify data origin and integrity. It does NOT encrypt the data payload or provide confidentiality/privacy for DNS queries (which is handled by DNS over HTTPS or DNS over TLS).
3
Evaluate Statement 3 regarding ARP Spoofing OSI layer and mechanism
Statement 3 is correct.
Address Resolution Protocol (ARP) works at the Data Link Layer (Layer 2) to resolve IP addresses to MAC addresses on local area networks. ARP spoofing sends forged ARP responses to map a legitimate IP to an attacker's MAC address.

Anahtar Kavram

Cybersecurity Threats and Protocol Vulnerabilities (DNS Cache Poisoning, DNSSEC authentication vs encryption, ARP Spoofing)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Information Technology and Cybersecurity

Bu konudan daha fazla soru