DNS poisoning is also known as which attack?

DNS poisoning is also known as which attack?

• A. DNS hijacking
• B. DNS tunneling
• C. DNS spoofing
• D. DNSSEC bypass

Answer: (C)

DNS poisoning happens when false DNS records are inserted into a resolver’s cache, making it return malicious IP addresses for domain lookups. This is why it’s also called DNS spoofing: the attacker impersonates legitimate responses and deceives the resolver into trusting the forged data. The goal is to redirect users to a malicious site or server without changing the actual domain’s records. Other options describe different ideas: DNS hijacking involves taking control of a domain’s DNS data at the source (registrar or authoritative servers), not poisoning a resolver’s cache. DNS tunneling uses DNS as a covert channel for data exfiltration, not about returning fake IPs. DNSSEC bypass refers to defeating DNSSEC protections, not the classic cache-poisoning attack.

DNS poisoning happens when false DNS records are inserted into a resolver’s cache, making it return malicious IP addresses for domain lookups. This is why it’s also called DNS spoofing: the attacker impersonates legitimate responses and deceives the resolver into trusting the forged data. The goal is to redirect users to a malicious site or server without changing the actual domain’s records.

Other options describe different ideas: DNS hijacking involves taking control of a domain’s DNS data at the source (registrar or authoritative servers), not poisoning a resolver’s cache. DNS tunneling uses DNS as a covert channel for data exfiltration, not about returning fake IPs. DNSSEC bypass refers to defeating DNSSEC protections, not the classic cache-poisoning attack.