Exam 312-50v10 topic 1 question 76 discussion

Actual exam question from ECCouncil's 312-50v10

Question #: 76
Topic #: 1

Some clients of TPNQM SA were redirected to a malicious site when they tried to access the TPNQM main site. Bob, a system administrator at TPNQM SA, found that they were victims of DNS Cache Poisoning.
What should Bob recommend to deal with such a threat?

A. The use of security agents in clients' computers
B. The use of DNSSEC
C. The use of double-factor authentication
D. Client awareness

Show Suggested Answer

Suggested Answer: B 🗳️

by TrendMicroDLPSSucks at July 16, 2020, 1:53 p.m.

Comments

Submit Cancel

TrendMicroDLPSSucks

1 year ago

DNSSEC as a solution Cache poisoning tools are available to help organizations prevent these attacks. The most widely used cache poisoning prevention tool is DNSSEC (Domain Name System Security Extension). It was developed by the Internet Engineering Task Force and provides secure DNS data authentication. When deployed, computers will be able to confirm if DNS responses are legitimate, whereas it currently has no way of determining real or fake ones. It also has the ability to verify that a domain name does not exist at all, which can help prevent man in the middle attacks. DNSSEC will verify the root domain or sometimes called “signing the root.” When an end user attempts to access a site, a stub resolver on their computer requests the site's IP address from a recursive name server. After the record is requested by the server, it will also request the zones DNSEC key. The key will then be used to verify that the IP address record is the same as the record on the authoritative server.

upvoted 3 times

...