Which DNS attack involves altering the DNS resolver cache to redirect DNS queries to malicious sites?

Which DNS attack involves altering the DNS resolver cache to redirect DNS queries to malicious sites?

• A. DNS spoofing
• B. Intranet DNS spoofing
• C. DNS cache poisoning
• D. Internet DNS poisoning

Answer: (C)

DNS cache poisoning is the technique in which forged DNS data is inserted into a resolver’s cache, so subsequent lookups for a domain return an attacker-controlled IP address. Resolvers cache answers to speed up repeated queries, keeping those mappings for a time-to-live. If an attacker can inject a false mapping and the resolver accepts it, the poisoned entry is stored, and anyone querying that domain during the TTL will be redirected to the malicious site. This is specifically about corrupting the resolver’s cached data, which is why it’s the correct concept for this scenario.

DNS cache poisoning is the technique in which forged DNS data is inserted into a resolver’s cache, so subsequent lookups for a domain return an attacker-controlled IP address. Resolvers cache answers to speed up repeated queries, keeping those mappings for a time-to-live. If an attacker can inject a false mapping and the resolver accepts it, the poisoned entry is stored, and anyone querying that domain during the TTL will be redirected to the malicious site. This is specifically about corrupting the resolver’s cached data, which is why it’s the correct concept for this scenario.