Domain Name System (DNS) Attacks

Question 1

What is a DNS?

Answer 1

Domain Name System

Responsible for translating human friendly domain names into IP addresses that computers can understand

Question 2

What is DNS Cache Poisoning?

Answer 2

involves corrupting the DNS cache data of a DNS resolver with false information

Question 3

What is a DNS Amplification Attack?

Answer 3

the attacker exploits the DNS resolution process to overwhelm a target system with DNS response traffic.

Question 4

What is DNS Tunneling?

Answer 4

involves using the DNS protocol to encapsulate non-DNS traffic, such as HTTP or SSH over port 53 to attempt to bypass the organization’s firewall rules in order to conduct command and control or data exfiltration.

Question 5

What is Domain Hijacking?

Answer 5

Aka Domain theft

Altering a domains name registration without the original registrants consent

Use domain registry lock services to prevent any unauthorized changes to domain registrations

Question 6

What is DNS Zone Transfer Attacks?

Answer 6

The attacker mimics an authorized system to request and obtain the entire DNS zone data for a domain