DNS Spoofing involves which of the following?

DNS Spoofing involves which of the following?

• A. Using a trusted certificate
• B. Pretending to be a DNS server and directing you to a false website
• C. Routing packets to the wrong IP address
• D. Decrypting encrypted traffic

Answer: (B)

DNS spoofing is when an attacker tricks the DNS system into returning a forged IP address for a domain, so your browser connects to a malicious site instead of the legitimate one. This often happens by pretending to be a DNS server or by poisoning a DNS cache, directing traffic to the attacker’s website. The result is that even if you type the correct URL, you’re led to a site that could steal data or install malware. This isn’t about using a trusted certificate or decrypting traffic, which relate to authenticating a site and protecting data in transit, not about misdirecting which server answers a domain lookup. It’s also not just about routing packets to a wrong IP address at the network level; DNS spoofing specifically corrupts the domain-to-IP mapping. To reduce risk, use DNSSEC-enabled resolvers, verify certificates, and prefer HTTPS with strong certificate validation.

DNS spoofing is when an attacker tricks the DNS system into returning a forged IP address for a domain, so your browser connects to a malicious site instead of the legitimate one. This often happens by pretending to be a DNS server or by poisoning a DNS cache, directing traffic to the attacker’s website. The result is that even if you type the correct URL, you’re led to a site that could steal data or install malware. This isn’t about using a trusted certificate or decrypting traffic, which relate to authenticating a site and protecting data in transit, not about misdirecting which server answers a domain lookup. It’s also not just about routing packets to a wrong IP address at the network level; DNS spoofing specifically corrupts the domain-to-IP mapping. To reduce risk, use DNSSEC-enabled resolvers, verify certificates, and prefer HTTPS with strong certificate validation.