312-50V10 · Question #108
Tess King is using the nslookup command to craft queries to list all DNS information (such as Name Servers, host names, MX records, CNAME records, glue records (delegation for child Domains), zone ser
The correct answer is B. A zone transfer. Using nslookup to enumerate all DNS records for a domain, including NS, MX, CNAME, and glue records, is the process of performing a DNS zone transfer.
Question
Tess King is using the nslookup command to craft queries to list all DNS information (such as Name Servers, host names, MX records, CNAME records, glue records (delegation for child Domains), zone serial number, TimeToLive (TTL) records, etc) for a Domain. What do you think Tess King is trying to accomplish? Select the best answer.
Options
- AA zone harvesting
- BA zone transfer
- CA zone update
- DA zone estimate
How the community answered
(50 responses)- A2% (1)
- B88% (44)
- C6% (3)
- D4% (2)
Why each option
Using nslookup to enumerate all DNS records for a domain, including NS, MX, CNAME, and glue records, is the process of performing a DNS zone transfer.
Zone harvesting is not a standard DNS or security term for this activity; zone transfer is the correct and precise term for bulk DNS record retrieval.
A DNS zone transfer (AXFR query type) replicates all resource records from a DNS zone to the querying client. When performed with nslookup by setting the query type to ANY or using the ls command, an attacker can retrieve the full contents of a zone including host records, mail exchangers, name servers, and delegation information. This reconnaissance technique exposes the internal network structure of an organization.
A zone update refers to modifying or adding records within a DNS zone (such as a dynamic DNS update), which is the opposite of read-only enumeration.
Zone estimate is not a recognized DNS operation or security technique and has no defined meaning in DNS terminology.
Concept tested: DNS zone transfer reconnaissance using nslookup
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/dns-zone-transfer
Topics
Community Discussion
No community discussion yet for this question.