A User Recently Entered a Username and Password into a Recruiting

question 94

Multiple Choice

A user recently entered a username and password into a recruiting application website that had been forged to look like the legitimate site. Upon investigation, a security analyst identifies the following: The legitimate website's IP address is 10.1.1.20 and eRecruit.local resolves to this IP. The forged website's IP address appears to be 10.2.12.99, based on NetFlow records. All three of the organization's DNS servers show the website correctly resolves to the legitimate IP. DNS query logs show one of the three DNS servers returned a result of 10.2.12.99 (cached) at the approximate time of the suspected compromise. Which of the following MOST likely occurred?

• A) A reverse proxy was used to redirect network traffic.
• B) An SSL strip MITM attack was performed.
• C) An attacker temporarily poisoned a name server.
• D) An ARP poisoning attack was successfully executed.

---

Definitions:

Aggressively

In a manner that is forceful, assertive, or intent on dominating or achieving one's goals, sometimes implying a readiness to confront or attack.

Negative Reinforcement

A behavior modification technique that involves the removal of an unpleasant stimulus to increase the likelihood of a desired behavior being repeated.

Extinction

In behavioral psychology, the process where a conditioned response decreases in frequency and eventually disappears when the stimulus is no longer presented.

Latent Learning

A form of learning that occurs without any obvious reinforcement of the behavior or associations that are learned, often becoming apparent under different conditions.