CCIE Security Exam: Cisco IOS Router DNS Spoofing | Answer

Cisco IOS Router DNS Spoofing Configuration

Prev Question Next Question

Question

A Cisco IOS router is configured as follows: ip dns spoofing 192.168.20.1 What will the router respond with when it receives a DNS query for its own host name?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B.

The "ip dns spoofing" command is used to configure the router to respond to DNS queries for specified hostnames with a specific IP address, regardless of what the actual DNS server might return. In this case, the command "ip dns spoofing 192.168.20.1" is telling the router to respond to DNS queries for its own hostname with the IP address 192.168.20.1.

Therefore, the correct answer is C. When the router receives a DNS query for its own hostname, it will respond with the IP address 192.168.20.1, even if that is not the actual IP address assigned to the interface that received the query.

Answer A is incorrect because the router will always respond with the spoofed IP address 192.168.20.1, regardless of the incoming interface.

Answer B is incorrect because the router will respond with 192.168.20.1 regardless of whether the outside interface is up or down.

Answer D is incorrect because the "ip dns spoofing" command is specifically used to configure the router to respond to DNS queries, so the router will not ignore the query and forward it directly to the DNS server.