Halloween Special 2026! Get Up to 25% OFF Practice Questions! Limited Time - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GAQM CPEH-001 Exam - Topic 2 Question 119 Discussion

Posted by Kiera on Nov 25, 2025 at 05:47 PM

Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them. Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B. How do you prevent DNS spoofing? (Select the Best Answer.)

Suggested Answer: C

Implement DNS Anit-Spoofing measures to prevent DNS Cache Pollution to occur.


Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
29 comments · newest first
BR
Broderick 6 months ago
Overall, C is the strongest option here. Good call!
EL
Elke 6 months ago
B seems irrelevant. Timeouts don’t prevent spoofing.
BI
Billye 7 months ago
A could help too, but not as effective as C.
LA
Launa 7 months ago
Agreed! C makes sense. Protects against attacks.
DE
Delbert 7 months ago
I think C is the best choice. Anti-spoofing is crucial.
IR
Ira 7 months ago
I agree with C, but why isn't anyone talking about regular updates?
MI
Mirta 7 months ago
D is important, but it won't stop spoofing directly.
FA
Fausto 8 months ago
Wait, disabling DNS timeouts? That sounds risky...
CH
Cheryl 8 months ago
I think A could help too, but not as effective as C.
TR
Tran 8 months ago
I bet the guy who came up with option B was the same one who thought unplugging the router would fix the internet.
KE
Keneth 8 months ago
D) Disable DNS Zone Transfer? Nah, that's just going to create more problems than it solves.
WI
Willodean 9 months ago
A) Install DNS logger? Seriously? That's like trying to catch a thief by watching the security camera footage after they've already stolen everything.
BR
Brigette 9 months ago
Disabling DNS timeouts (B) won't help, that's just asking for trouble.
VE
Veronika 9 months ago
I’m pretty certain that disabling DNS timeouts isn’t a good preventive measure against spoofing. I’d go with DNS Anti-spoofing, but I wish I had more clarity on this.
BE
Bernardine 9 months ago
I’m leaning towards installing DNS logger to track packets, but I recall that might not directly prevent spoofing. It’s tricky!
RO
Rodrigo 9 months ago
This question feels familiar; I think we had a practice question about DNS vulnerabilities. Disabling DNS Zone Transfer seems like it could help, but I’m not confident.
FR
Francisca 9 months ago
I remember studying DNS security, and I think installing DNS Anti-spoofing could be the right choice, but I'm not entirely sure if it's the only solution.
FR
Frank 10 months ago
Okay, I think I've got it. The anti-spoofing option is the best choice because it directly addresses the root cause of the problem - the vulnerability in company B's DNS server. Disabling timeouts or zone transfers might help in other scenarios, but for this specific issue, the anti-spoofing solution is the way to go.
CR
Cristen 10 months ago
Installing a DNS logger could help track the vulnerable packets, but it doesn't actually prevent the spoofing attack from happening in the first place. I think the anti-spoofing solution is the way to go here.
AN
Annette 10 months ago
C is definitely the best choice here!
SA
Santos 11 months ago
C) Install DNS Anti-spoofing is the best answer to prevent DNS spoofing.
ME
Merlyn 11 months ago
D is important, but it won't stop spoofing directly.
NI
Nickolas 11 months ago
Hmm, I'm a bit confused. Disabling DNS timeouts or zone transfers doesn't seem like it would actually stop the spoofing attack. I'm leaning towards the anti-spoofing option, but I want to make sure I understand it fully before selecting it.
KR
Kristel 11 months ago
I think the key here is to focus on preventing the DNS spoofing attack. Option C, "Install DNS Anti-spoofing", seems like the most direct way to address that.
OL
Olive 6 months ago
↳ replying to Kristel
C is the way to go for proactive defense against spoofing.
JA
Jacklyn 6 months ago
↳ replying to Kristel
True, but it’s more of a reactive measure, not preventive.
PO
Portia 6 months ago
↳ replying to Kristel
What about option A? Tracking packets could help too.
ST
Stephaine 10 months ago
↳ replying to Kristel
Definitely! Anti-spoofing is crucial for security.
AL
Alex 10 months ago
↳ replying to Kristel
I agree, option C is the best choice.
0/2000 characters

Save Cancel