ITPEC FE Subject A April 2025 Question 27
ITPEC FE Subject A April 2025 — Question 27 of 60
DNS cache poisoning — identifying the attack where fake records are injected into a DNS server's cache.
DNS cache poisoning (also called DNS spoofing) is an attack where false domain-to-IP mappings are injected into the cache of a DNS server. When a user queries that DNS server for a legitimate domain, they are redirected to a fake (attacker-controlled) server instead.
Why not others:
- (b) Describes a DNS amplification attack — a type of DDoS where the attacker sends many recursive queries through a DNS server to overwhelm a target with amplified traffic.
- (c) Describes a DNS zone transfer attack — the attacker retrieves the full zone file from a DNS server to obtain internal network information (hostnames, IPs).
- (d) Describes DNS fingerprinting / reconnaissance — gathering version information of DNS server software (e.g., via dig or nslookup) to find known vulnerabilities.
Key rule: DNS cache poisoning = fake DNS records → user redirected to malicious server.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.