A security engineer is reviewing log files after a third party discovered usernames and passwords for the organization's accounts. The engineer sees there was a change in the IP address for a vendor website one week earlier. This change lasted eight hours. Which of the following attacks was MOST likely used?
A) Man-in-the-middle
B) Spear phishing
C) Evil twin
D) DNS poisoning

Question

Quizplus · Accepted Answer

DNS poisoning is likely because it involves altering DNS records to redirect traffic to a malicious site, which aligns with the change in IP address observed.

A Security Engineer Is Reviewing Log Files After a Third