nerdexam
EC-Council

312-49 · Question #417

Simon is a former employee of Trinitron XML Inc. He feels he was wrongly terminated and wants to hack into his former company's network. Since Simon remembers some of the server names, he attempts…

The correct answer is D. Perform a zone transfer. AXFR (full zone transfer) and IXFR (incremental zone transfer) are DNS record types used to replicate zone data between DNS servers. When an attacker uses DIG to request an AXFR or IXFR, they are attempting a DNS zone transfer - pulling a complete copy of the DNS zone file…

Submitted by jian89· Apr 18, 2026Network Forensics

Question

Simon is a former employee of Trinitron XML Inc. He feels he was wrongly terminated and wants to hack into his former company's network. Since Simon remembers some of the server names, he attempts to run the axfr and ixfr commands using DIG. What is Simon trying to accomplish here?

Options

  • ASend DOS commands to crash the DNS servers
  • BPerform DNS poisoning
  • CEnumerate all the users in the domain
  • DPerform a zone transfer

How the community answered

(50 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    2% (1)
  • D
    92% (46)

Explanation

AXFR (full zone transfer) and IXFR (incremental zone transfer) are DNS record types used to replicate zone data between DNS servers. When an attacker uses DIG to request an AXFR or IXFR, they are attempting a DNS zone transfer - pulling a complete copy of the DNS zone file. This reveals all hostnames, IP addresses, mail servers, and subdomains registered in the zone, giving the attacker a detailed internal network map for further attack planning.

Topics

#DNS#Zone Transfer#Network Reconnaissance#DIG command

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice