Which of the following is MOST likely occurring?

A customer has reported that an organization’s website displayed an image of a smiley (ace rather than the expected web page for a short time two days earlier.

A security analyst reviews log tries and sees the following around the lime of the incident:

Which of the following is MOST likely occurring?
A . Invalid trust chain
B. Domain hijacking
C. DNS poisoning
D. URL redirection

View Answer

Answer: C

Explanation:

The log entry shows the IP address for "www.example.com" being changed to a different IP address, which is likely the result of DNS poisoning. DNS poisoning occurs when an attacker is able to change the IP address associated with a domain name in a DNS server’s cache, causing clients to connect to the attacker’s server instead of the legitimate server.

Reference: CompTIA Security+ SY0-601 Exam Objectives: 3.2 Given a scenario, implement secure network architecture concepts.