Question

Which of the following is not an appropriate method of defacing web server?

(a) Fetching credentials through MiTM

(b) Brute-forcing Admin Password

(c) IP address spoofing

(d) DNS Attack through cache poisoning

I had been asked this question at a job interview.

This interesting question is from Web Server Attacks topic in portion Understanding Attack Vectors of Cyber Security

Answer 1

The correct answer is:

(c) IP address spoofing

IP address spoofing is a technique used to disguise the origin of network traffic, but it is not typically used for defacing a web server. Defacing a web server usually involves gaining unauthorized access to the server and modifying its content. Methods like fetching credentials through MiTM (Man-in-the-Middle), brute-forcing admin passwords, and DNS attacks via cache poisoning can be used to facilitate server defacement by either stealing credentials or redirecting traffic to malicious content.