312-49 · Question #417
Simon is a former employee of Trinitron XML Inc. He feels he was wrongly terminated and wants to hack into his former company's network. Since Simon remembers some of the server names, he attempts…
The correct answer is D. Perform a zone transfer. AXFR (full zone transfer) and IXFR (incremental zone transfer) are DNS record types used to replicate zone data between DNS servers. When an attacker uses DIG to request an AXFR or IXFR, they are attempting a DNS zone transfer - pulling a complete copy of the DNS zone file…
Question
Simon is a former employee of Trinitron XML Inc. He feels he was wrongly terminated and wants to hack into his former company's network. Since Simon remembers some of the server names, he attempts to run the axfr and ixfr commands using DIG. What is Simon trying to accomplish here?
Options
- ASend DOS commands to crash the DNS servers
- BPerform DNS poisoning
- CEnumerate all the users in the domain
- DPerform a zone transfer
How the community answered
(50 responses)- A2% (1)
- B4% (2)
- C2% (1)
- D92% (46)
Explanation
AXFR (full zone transfer) and IXFR (incremental zone transfer) are DNS record types used to replicate zone data between DNS servers. When an attacker uses DIG to request an AXFR or IXFR, they are attempting a DNS zone transfer - pulling a complete copy of the DNS zone file. This reveals all hostnames, IP addresses, mail servers, and subdomains registered in the zone, giving the attacker a detailed internal network map for further attack planning.
Topics
Community Discussion
No community discussion yet for this question.