MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What does DNS stand for?
a. Domain Network Service
b. Domain Name System
c. Data Name System
d. Directory Network Service
Answer: b. Domain Name Systemokta+2
What is DNS poisoning?
a. Filtering DNS traffic only
b. Entering fake information into DNS caches
c. Compressing DNS packets for speed
d. Encrypting DNS queries
Answer: b. Entering fake information into DNS cachesfortinet+3
What is the main goal of a DNS poisoning attack?
a. Speeding up internet connections
b. Deceiving users to visit malicious websites
c. Increasing DNS uptime
d. Backing up DNS records
Answer: b. Deceiving users to visit malicious websitescatchpoint+2
Which part of the DNS infrastructure is targeted in DNS cache poisoning?
a. ISP servers only
b. DNS cache or DNS resolver
c. Website content servers
d. User’s modem
Answer: b. DNS cache or DNS resolverovhcloud+3
What is another name for DNS poisoning?
a. DNS tunneling
b. DNS spoofing
c. DNS flooding
d. DNS rebinding
Answer: b. DNS spoofingcloudflare+3
What type of records are manipulated during DNS poisoning?
a. User account records
b. DNS records
c. Firewall records
d. Browser cookies
Answer: b. DNS recordsovhcloud+2
How can users be affected by DNS poisoning?
a. By being redirected to fake websites
b. By hardware overheating
c. By internet connection dropping
d. By receiving fake emails
Answer: a. By being redirected to fake websiteswebasha+2
Which device typically stores a DNS cache?
a. Internet service provider
b. User computer or a DNS resolver
c. Only website host
d. Routers only
Answer: b. User computer or a DNS resolveracunetix+2
Attackers often use DNS poisoning to steal which kind of information?
a. Expired cookies
b. Login credentials and sensitive data
c. Server uptime data
d. Network speed statistics
Answer: b. Login credentials and sensitive datakinsta+2
How does the attacker make sure their forged response gets cached by the DNS server?
a. Send response after the legitimate server
b. Send response before the legitimate server
c. Use a VPN
d. Clear browser history
Answer: b. Send response before the legitimate serverwebasha+2
Which network protocol is commonly exploited in DNS poisoning attacks because it does not verify the sender?
a. TCP
b. UDP
c. FTP
d. HTTP
Answer: b. UDPokta+1
What is the main risk of visiting a malicious website via DNS poisoning?
a. Getting faster internet
b. Installing malware unknowingly
c. Accessing more websites
d. Improving privacy
Answer: b. Installing malware unknowinglywpoven+2
What can a successful DNS poisoning attack lead to?
a. Legitimate sites loading faster
b. Phishing attacks
c. Lower DNS latency
d. Blocking access to all internet
Answer: b. Phishing attackskinsta+2
Which factor makes DNS poisoning possible?
a. DNS data is always verified
b. Lack of authentication in DNS responses
c. Use of encrypted DNS
d. Use of static websites
Answer: b. Lack of authentication in DNS responsesinvicti+2
What is DNS cache?
a. A backup of websites
b. Temporary storage of resolved domain names
c. The entire DNS database
d. User’s local files
Answer: b. Temporary storage of resolved domain namesfortinet+2
Why do attackers often use “race conditions” in DNS poisoning?
a. To slow down servers
b. To ensure their fake response arrives before the legitimate one
c. To monitor DNS logs
d. To increase TTL
Answer: b. To ensure their fake response arrives before the legitimate onecatchpoint+2
What is a sign your computer might be impacted by DNS poisoning?
a. Websites are unusually fast
b. You are redirected to unexpected or fake websites
c. Fonts look different
d. Lower CPU usage
Answer: b. You are redirected to unexpected or fake websiteswpoven+1
What does DNSSEC do?
a. Secures websites from phishing
b. Provides security extensions for DNS to protect against attacks
c. Blocks all traffic except DNS
d. Detects malware
Answer: b. Provides security extensions for DNS to protect against attacksimperva+2
Which of these is a prevention method against DNS poisoning?
a. DNS cache disabling
b. Implementing DNSSEC
c. Disabling firewalls
d. Changing screen resolution
Answer: b. Implementing DNSSECakamai+3
What is TTL (Time To Live) in DNS?
a. Time before DNS cache is cleared
b. Internet connection speed
c. Maximum number of DNS attacks
d. Number of DNS queries per second
Answer: a. Time before DNS cache is clearedovhcloud
Which scenario describes a “man-in-the-middle” DNS poisoning attack?
a. Attacker intercepts DNS query and supplies a fake response
b. User disables DNS entirely
c. Site blocks all DNS requests
d. User only visits trusted websites
Answer: a. Attacker intercepts DNS query and supplies a fake responseinvicti+1
Which real-life incident used DNS poisoning to redirect users in China to unintended websites?
a. DDoS attack on Dyn
b. 2010 attack on China’s DNS infrastructure
c. Heartbleed bug
d. Stuxnet virus
Answer: b. 2010 attack on China’s DNS infrastructurewebasha
What type of website can attackers redirect you to with DNS poisoning?
a. Only government websites
b. Legitimate-looking phishing or malware sites
c. ISP homepages only
d. Official update sites
Answer: b. Legitimate-looking phishing or malware siteskinsta+2
What happens when a poisoned DNS cache is not cleared quickly?
a. The attack stops
b. More users are affected as the fake information spreads
c. Internet speeds increase
d. DNS records get encrypted
Answer: b. More users are affected as the fake information spreadssanfoundry+2
Which DNS attack tries to “predict” the transaction ID and port used for queries?
a. DNS over HTTPS
b. DNS cache poisoning
c. DNS tunneling
d. DNS masking
Answer: b. DNS cache poisoningcatchpoint+1
What is a consequence of DNS poisoning on organizations?
a. Increased brand trust
b. Loss of customer data and trust
c. Improved network security
d. Lower operating costs
Answer: b. Loss of customer data and trustwpoven+2
What can regular monitoring and software updates for DNS resolvers help with?
a. Encouraging DNS attacks
b. Preventing DNS poisoning
c. Slowing down DNS queries
d. Increasing cache size
Answer: b. Preventing DNS poisoningcloudflare+3
What does an open DNS resolver mean for security?
a. Improved performance
b. More vulnerable to poisoning
c. Not affected by attacks
d. Blocks all malware
Answer: b. More vulnerable to poisoningovhcloud
How does a user computer decide where to go when a website name is typed?
a. Consults a manual
b. Checks browser bookmarks
c. Uses DNS resolver to translate domain name to IP address
d. Always connects to the nearest server
Answer: c. Uses DNS resolver to translate domain name to IP addressokta+2
What does clearing the DNS cache do?
a. Reboots the computer
b. Deletes all DNS responses, forcing resolver to fetch updated data
c. Increases DNS poisoning risk
d. Encrypts DNS queries
Answer: b. Deletes all DNS responses, forcing resolver to fetch updated dataacunetix+1
How do attackers benefit by redirecting users to fake banking websites using DNS poisoning?
a. Faster sign-ins for users
b. Access to user credentials and funds
c. Unclogging network traffic
d. Alerting site admins to issues
Answer: b. Access to user credentials and fundswebasha+1
What is an “authoritative DNS server”?
a. The user’s browser
b. The server responsible for storing official DNS records of a domain
c. The oldest DNS resolver in the network
d. The ISP server
Answer: b. The server responsible for storing official DNS records of a domaincloudflare+2
Which of the following best describes phishing in the context of DNS poisoning?
a. Redirecting to real sites only
b. Directing users to a fake site to steal information
c. Increasing search engine rankings
d. Backing up DNS data
Answer: b. Directing users to a fake site to steal informationkinsta+2
How does query ID randomization help stop DNS poisoning?
a. Makes DNS resolver queries unpredictable
b. Turns off DNS entirely
c. Decreases TTL
d. Increases query length
Answer: a. Makes DNS resolver queries unpredictableimperva+3
In DNS poisoning, what does the attacker “forge”?
a. DNS server’s physical device
b. DNS response containing a fake IP address
c. User account password
d. Firewall logs
Answer: b. DNS response containing a fake IP addressinvicti+2
What is a fake website created by DNS poisoning typically designed to do?
a. Display only ads
b. Look and act like the original site to trick users
c. Make internet faster
d. Change search results
Answer: b. Look and act like the original site to trick userswpoven+2
What’s a DNS resolver?
a. Device managing user logins
b. System component that translates domain names to IP addresses
c. Always a physical server
d. A backup server
Answer: b. System component that translates domain names to IP addressesfortinet+2
What happens when a DNS resolver’s cache is poisoned?
a. Only the attacker is affected
b. All users relying on that resolver can be misdirected
c. Website owners are compensated
d. Data usage drops
Answer: b. All users relying on that resolver can be misdirectedsanfoundry+3
What can attackers NOT do using DNS poisoning?
a. Install malware on users’ devices
b. Increase internet speed for victims
c. Steal login details
d. Redirect network traffic
Answer: b. Increase internet speed for victimswebasha+2
Why is using DNS over HTTPS (DoH) a defense measure?
a. It blocks all computers
b. It encrypts DNS queries, making attacks harder
c. It deletes DNS records
d. It changes website content
Answer: b. It encrypts DNS queries, making attacks harderakamai+3
What is a “phishing” site?
a. A genuine site
b. A lookalike site used for theft
c. A router log
d. A DNS response
Answer: b. A lookalike site used for theftkinsta+2
Which is NOT a typical symptom of DNS poisoning?
a. Slower website loading
b. Being redirected to the correct website
c. Phishing attempts
d. Unexpected site appearances
Answer: b. Being redirected to the correct websitewpoven+2
What is the first step in a DNS poisoning attack?
a. The attacker gains access to a DNS server or resolver
b. Querying browser history
c. Changing firewall rules
d. Spoofing ARP tables only
Answer: a. The attacker gains access to a DNS server or resolvercatchpoint+2
Which attack technique is closely related to DNS poisoning?
a. Brute-force password guessing
b. ARP Spoofing
c. Buffer overflow
d. Cross-site scripting
Answer: b. ARP Spoofingwayground+1
Why is DNS poisoning hard to detect?
a. It uses loud alarms
b. Makes changes that appear invisible to most users
c. Always causes blue screen errors
d. Needs expensive software to detect
Answer: b. Makes changes that appear invisible to most userswebasha+2
In DNS poisoning, a “rogue” DNS server is one that…
a. Follows all security guidelines
b. Is set up by attackers to provide false information
c. Always blocks all network connections
d. Is the official primary DNS
Answer: b. Is set up by attackers to provide false informationovhcloud
How can end users check if they’re victims of DNS poisoning?
a. Check the resolved IP address of a website
b. Restart the browser
c. Clear browser cookies only
d. Adjust screen contrast
Answer: a. Check the resolved IP address of a websiteovhcloud+1
What should organizations update to prevent DNS poisoning?
a. Screen savers
b. DNS resolver software and configurations
c. Mouse drivers
d. Printer software
Answer: b. DNS resolver software and configurationsimperva+3
What does “spoofing” mean in the context of DNS poisoning?
a. Making fake DNS responses look genuine
b. Jamming signals
c. Encrypting DNS requests
d. Deleting website content
Answer: a. Making fake DNS responses look genuineokta+3
Which scenario describes DNS cache poisoning spreading across a network?
a. Only one user is affected
b. Poisoned data spreads to other DNS resolvers and ISPs, impacting many users
c. Only the attacker’s computer is affected
d. Antivirus blocks all threats immediately
Answer: b. Poisoned data spreads to other DNS resolvers and ISPs, impacting many userssanfoundry+2

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info