312-50V11 · Question #108
Tess King is using the nslookup command to craft queries to list all DNS information (such as Name Servers, host names, MX records, CNAME records, glue records (delegation for child Domains), zone ser
The correct answer is B. A zone transfer. Using nslookup to enumerate all DNS resource records for a domain - including NS, MX, CNAME, and A records - is the process of performing a DNS zone transfer.
Question
Tess King is using the nslookup command to craft queries to list all DNS information (such as Name Servers, host names, MX records, CNAME records, glue records (delegation for child Domains), zone serial number, TimeToLive (TTL) records, etc) for a Domain. What do you think Tess King is trying to accomplish? Select the best answer.
Options
- AA zone harvesting
- BA zone transfer
- CA zone update
- DA zone estimate
How the community answered
(68 responses)- A7% (5)
- B87% (59)
- C4% (3)
- D1% (1)
Why each option
Using nslookup to enumerate all DNS resource records for a domain - including NS, MX, CNAME, and A records - is the process of performing a DNS zone transfer.
Zone harvesting is not a standard DNS term; zone transfer is the correct terminology for bulk DNS record enumeration.
A zone transfer (AXFR query) retrieves the complete set of DNS resource records from an authoritative name server for a given zone. Attackers and administrators use tools like nslookup with the 'ls -d' option to attempt this, exposing the entire DNS infrastructure including host names, mail servers, and delegation records.
A zone update refers to modifying records in a zone (dynamic DNS updates via DDNS), not reading them.
Zone estimate is not a recognized DNS operation or security concept.
Concept tested: DNS zone transfer enumeration using nslookup
Source: https://learn.microsoft.com/en-us/windows-server/networking/dns/zone-transfer
Topics
Community Discussion
No community discussion yet for this question.