GCIH Exam QuestionsBrowse all questions from this exam

GCIH Exam - Question 64


If an attacker is attempting to use the Kaminsky method of DNS cache poisoning, what is the maximum number of unique Query IDs which must be presented to the victim DNS server before a match is made?

Show Answer
Correct Answer: CD

The Kaminsky attack exploits the DNS protocol by attempting to guess the 16-bit transaction ID. Since a 16-bit number can have 65,536 unique values, the maximum number of unique Query IDs that need to be presented is 65,536.

Discussion

1 comment
Sign in to comment
straleOption: C
Mar 10, 2024

C is correct