Which of the following is occurring?

A company’s public-facing website, https://www.organization.com, has an IP address of 166.18.75.6. However, over the past hour the SOC has received reports of the site’s homepage displaying incorrect information. A quick nslookup search shows hitps://;www.organization.com is pointing to 151.191.122.115.

Which of the following is occurring?
A . DoS attack
B. ARP poisoning
C. DNS spoofing
D. NXDOMAIN attack

View Answer

Answer: C

Explanation:

The issue is DNS spoofing, where the DNS resolution has been compromised and is pointing to a malicious IP address.

References: CompTIA Security+ Study Guide: Exam SY0-601, Chapter 7