312-50V10 · Question #640
Which of the following tools can be used to perform a zone transfer?
The correct answer is A. NSLookup C. Dig D. Sam Spade E. Host. NSLookup, Dig, Sam Spade, and Host all support DNS AXFR zone transfer requests, while Finger, Netcat, and Neotrace do not.
Question
Which of the following tools can be used to perform a zone transfer?
Options
- ANSLookup
- BFinger
- CDig
- DSam Spade
- EHost
- FNetcat
- GNeotrace
How the community answered
(24 responses)- A96% (23)
- B4% (1)
Why each option
NSLookup, Dig, Sam Spade, and Host all support DNS AXFR zone transfer requests, while Finger, Netcat, and Neotrace do not.
NSLookup performs zone transfers via the 'ls -d domain' command, Dig uses 'dig axfr @nameserver domain', Host uses 'host -l domain nameserver', and Sam Spade is a Windows network toolkit with built-in AXFR zone transfer support. All four tools directly send AXFR queries to authoritative nameservers to retrieve complete zone data, making them effective for both legitimate administration and DNS enumeration during security assessments.
Finger is a legacy protocol used solely to query user account and contact information from remote hosts, with no DNS query or AXFR capability.
Netcat is a general-purpose raw TCP/UDP socket utility and does not natively implement the DNS AXFR protocol required for zone transfers.
Neotrace is a visual traceroute and network mapping application focused on routing path analysis, not DNS zone retrieval.
Concept tested: DNS zone transfer tools supporting AXFR queries
Source: https://linux.die.net/man/1/dig
Topics
Community Discussion
No community discussion yet for this question.