Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them. Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B. How do you prevent DNS spoofing? (Select the Best Answer.)
Suggested Answer: C
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Implement DNS Anit-Spoofing measures to prevent DNS Cache Pollution to occur.
29 comments · newest first
BR
Broderick
6 months ago
Overall, C is the strongest option here. Good call!
EL
Elke
6 months ago
B seems irrelevant. Timeouts don’t prevent spoofing.
BI
Billye
7 months ago
A could help too, but not as effective as C.
LA
Launa
7 months ago
Agreed! C makes sense. Protects against attacks.
DE
Delbert
7 months ago
I think C is the best choice. Anti-spoofing is crucial.
IR
Ira
7 months ago
I agree with C, but why isn't anyone talking about regular updates?
MI
Mirta
7 months ago
D is important, but it won't stop spoofing directly.
FA
Fausto
8 months ago
Wait, disabling DNS timeouts? That sounds risky...
CH
Cheryl
8 months ago
I think A could help too, but not as effective as C.
TR
Tran
8 months ago
I bet the guy who came up with option B was the same one who thought unplugging the router would fix the internet.
KE
Keneth
8 months ago
D) Disable DNS Zone Transfer? Nah, that's just going to create more problems than it solves.
WI
Willodean
9 months ago
A) Install DNS logger? Seriously? That's like trying to catch a thief by watching the security camera footage after they've already stolen everything.
BR
Brigette
9 months ago
Disabling DNS timeouts (B) won't help, that's just asking for trouble.
VE
Veronika
9 months ago
I’m pretty certain that disabling DNS timeouts isn’t a good preventive measure against spoofing. I’d go with DNS Anti-spoofing, but I wish I had more clarity on this.
BE
Bernardine
9 months ago
I’m leaning towards installing DNS logger to track packets, but I recall that might not directly prevent spoofing. It’s tricky!
RO
Rodrigo
9 months ago
This question feels familiar; I think we had a practice question about DNS vulnerabilities. Disabling DNS Zone Transfer seems like it could help, but I’m not confident.
FR
Francisca
9 months ago
I remember studying DNS security, and I think installing DNS Anti-spoofing could be the right choice, but I'm not entirely sure if it's the only solution.
FR
Frank
10 months ago
Okay, I think I've got it. The anti-spoofing option is the best choice because it directly addresses the root cause of the problem - the vulnerability in company B's DNS server. Disabling timeouts or zone transfers might help in other scenarios, but for this specific issue, the anti-spoofing solution is the way to go.
CR
Cristen
10 months ago
Installing a DNS logger could help track the vulnerable packets, but it doesn't actually prevent the spoofing attack from happening in the first place. I think the anti-spoofing solution is the way to go here.
AN
Annette
10 months ago
C is definitely the best choice here!
SA
Santos
11 months ago
C) Install DNS Anti-spoofing is the best answer to prevent DNS spoofing.
ME
Merlyn
11 months ago
D is important, but it won't stop spoofing directly.
NI
Nickolas
11 months ago
Hmm, I'm a bit confused. Disabling DNS timeouts or zone transfers doesn't seem like it would actually stop the spoofing attack. I'm leaning towards the anti-spoofing option, but I want to make sure I understand it fully before selecting it.
KR
Kristel
11 months ago
I think the key here is to focus on preventing the DNS spoofing attack. Option C, "Install DNS Anti-spoofing", seems like the most direct way to address that.
OL
Olive
6 months ago
C is the way to go for proactive defense against spoofing.
JA
Jacklyn
6 months ago
True, but it’s more of a reactive measure, not preventive.
PO
Portia
6 months ago
What about option A? Tracking packets could help too.
ST
Stephaine
10 months ago
Definitely! Anti-spoofing is crucial for security.
AL
Alex
10 months ago
I agree, option C is the best choice.