What TCP/IP attack redirects users by changing the DNS of a legit site?

What TCP/IP attack redirects users by changing the DNS of a legit site?

• A. DNS Poisoning
• B. DNS
• C. Dig
• D. Direct

Answer: (A)

The attack being tested is about corrupting DNS responses so a legitimate site resolves to the wrong IP, guiding users to a fraudulent host. This is DNS poisoning (also known as DNS spoofing). By tampering with DNS data—either in a cache, on an authoritative server, or along the lookup path—the attacker makes a user’s browser think the legitimate domain points to the attacker-controlled address. As a result, even when the user enters the correct URL, they’re redirected to a malicious site, enabling phishing, credential theft, or malware delivery. The other options don’t describe this redirection technique. DNS is the system that translates names to addresses, not an attack itself. Dig is a tool used to query DNS records, not to perform redirection. Direct isn’t a standard term for a DNS-based attack.

The attack being tested is about corrupting DNS responses so a legitimate site resolves to the wrong IP, guiding users to a fraudulent host. This is DNS poisoning (also known as DNS spoofing). By tampering with DNS data—either in a cache, on an authoritative server, or along the lookup path—the attacker makes a user’s browser think the legitimate domain points to the attacker-controlled address. As a result, even when the user enters the correct URL, they’re redirected to a malicious site, enabling phishing, credential theft, or malware delivery.

The other options don’t describe this redirection technique. DNS is the system that translates names to addresses, not an attack itself. Dig is a tool used to query DNS records, not to perform redirection. Direct isn’t a standard term for a DNS-based attack.