GAQM CPEH-001 Exam - Topic 2 Question 119 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 119
Topic #: 2

Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them. Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B. How do you prevent DNS spoofing? (Select the Best Answer.)

AInstall DNS logger and track vulnerable packets

BDisable DNS timeouts

CInstall DNS Anti-spoofing

DDisable DNS Zone Transfer

Show Suggested Answer

Suggested Answer: C

Implement DNS Anit-Spoofing measures to prevent DNS Cache Pollution to occur.

by Kiera at Nov 25, 2025, 05:47 PM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Broderick

5 months ago

Overall, C is the strongest option here. Good call!

upvoted 0 times

...

Elke

5 months ago

B seems irrelevant. Timeouts don’t prevent spoofing.

upvoted 0 times

...

Billye

5 months ago

A could help too, but not as effective as C.

upvoted 0 times

...

Launa

5 months ago

Agreed! C makes sense. Protects against attacks.

upvoted 0 times

...

Delbert

5 months ago

I think C is the best choice. Anti-spoofing is crucial.

upvoted 0 times

...

Ira

5 months ago

I agree with C, but why isn't anyone talking about regular updates?

upvoted 0 times

...

Mirta

6 months ago

D is important, but it won't stop spoofing directly.

upvoted 0 times

...

Fausto

6 months ago

Wait, disabling DNS timeouts? That sounds risky...

upvoted 0 times

...

Cheryl

6 months ago

I think A could help too, but not as effective as C.

upvoted 0 times

...

Tran

7 months ago

I bet the guy who came up with option B was the same one who thought unplugging the router would fix the internet.

upvoted 0 times

...

Keneth

7 months ago

D) Disable DNS Zone Transfer? Nah, that's just going to create more problems than it solves.

upvoted 0 times

...

Willodean

7 months ago

A) Install DNS logger? Seriously? That's like trying to catch a thief by watching the security camera footage after they've already stolen everything.

upvoted 0 times

...

Brigette

7 months ago

Disabling DNS timeouts (B) won't help, that's just asking for trouble.

upvoted 0 times

...

Veronika

7 months ago

I’m pretty certain that disabling DNS timeouts isn’t a good preventive measure against spoofing. I’d go with DNS Anti-spoofing, but I wish I had more clarity on this.

upvoted 0 times

...

Bernardine

7 months ago

I’m leaning towards installing DNS logger to track packets, but I recall that might not directly prevent spoofing. It’s tricky!

upvoted 0 times

...

Rodrigo

8 months ago

This question feels familiar; I think we had a practice question about DNS vulnerabilities. Disabling DNS Zone Transfer seems like it could help, but I’m not confident.

upvoted 0 times

...

Francisca

8 months ago

I remember studying DNS security, and I think installing DNS Anti-spoofing could be the right choice, but I'm not entirely sure if it's the only solution.

upvoted 0 times

...

Frank

8 months ago

Okay, I think I've got it. The anti-spoofing option is the best choice because it directly addresses the root cause of the problem - the vulnerability in company B's DNS server. Disabling timeouts or zone transfers might help in other scenarios, but for this specific issue, the anti-spoofing solution is the way to go.

upvoted 0 times

...

Cristen

8 months ago

Installing a DNS logger could help track the vulnerable packets, but it doesn't actually prevent the spoofing attack from happening in the first place. I think the anti-spoofing solution is the way to go here.

upvoted 0 times

...

Annette

9 months ago

C is definitely the best choice here!

upvoted 0 times

...

Santos

9 months ago

C) Install DNS Anti-spoofing is the best answer to prevent DNS spoofing.

upvoted 0 times

...

Merlyn

9 months ago

D is important, but it won't stop spoofing directly.

upvoted 0 times

...

Nickolas

9 months ago

Hmm, I'm a bit confused. Disabling DNS timeouts or zone transfers doesn't seem like it would actually stop the spoofing attack. I'm leaning towards the anti-spoofing option, but I want to make sure I understand it fully before selecting it.

upvoted 0 times

...

Kristel

10 months ago

I think the key here is to focus on preventing the DNS spoofing attack. Option C, "Install DNS Anti-spoofing", seems like the most direct way to address that.

upvoted 0 times