nerdexam
EC-Council

312-50V10 · Question #108

Tess King is using the nslookup command to craft queries to list all DNS information (such as Name Servers, host names, MX records, CNAME records, glue records (delegation for child Domains), zone ser

The correct answer is B. A zone transfer. Using nslookup to enumerate all DNS records for a domain, including NS, MX, CNAME, and glue records, is the process of performing a DNS zone transfer.

Footprinting and Reconnaissance

Question

Tess King is using the nslookup command to craft queries to list all DNS information (such as Name Servers, host names, MX records, CNAME records, glue records (delegation for child Domains), zone serial number, TimeToLive (TTL) records, etc) for a Domain. What do you think Tess King is trying to accomplish? Select the best answer.

Options

  • AA zone harvesting
  • BA zone transfer
  • CA zone update
  • DA zone estimate

How the community answered

(50 responses)
  • A
    2% (1)
  • B
    88% (44)
  • C
    6% (3)
  • D
    4% (2)

Why each option

Using nslookup to enumerate all DNS records for a domain, including NS, MX, CNAME, and glue records, is the process of performing a DNS zone transfer.

AA zone harvesting

Zone harvesting is not a standard DNS or security term for this activity; zone transfer is the correct and precise term for bulk DNS record retrieval.

BA zone transferCorrect

A DNS zone transfer (AXFR query type) replicates all resource records from a DNS zone to the querying client. When performed with nslookup by setting the query type to ANY or using the ls command, an attacker can retrieve the full contents of a zone including host records, mail exchangers, name servers, and delegation information. This reconnaissance technique exposes the internal network structure of an organization.

CA zone update

A zone update refers to modifying or adding records within a DNS zone (such as a dynamic DNS update), which is the opposite of read-only enumeration.

DA zone estimate

Zone estimate is not a recognized DNS operation or security technique and has no defined meaning in DNS terminology.

Concept tested: DNS zone transfer reconnaissance using nslookup

Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/dns-zone-transfer

Topics

#zone transfer#nslookup#DNS enumeration#DNS records

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice