312-50V11 · Question #640
Which of the following tools can be used to perform a zone transfer?
The correct answer is A. NSLookup C. Dig D. Sam Spade E. Host. A DNS zone transfer (AXFR) replicates all records in a zone from a primary to a secondary server, but can also be used by attackers for reconnaissance. The tools that support zone transfers are: (A) NSLookup - use 'ls -d domain.com' or 'set type=AXFR' to request a transfer; (C) D
Question
Which of the following tools can be used to perform a zone transfer?
Options
- ANSLookup
- BFinger
- CDig
- DSam Spade
- EHost
- FNetcat
- GNeotrace
How the community answered
(32 responses)- A88% (28)
- B6% (2)
- F3% (1)
- G3% (1)
Explanation
A DNS zone transfer (AXFR) replicates all records in a zone from a primary to a secondary server, but can also be used by attackers for reconnaissance. The tools that support zone transfers are: (A) NSLookup - use 'ls -d domain.com' or 'set type=AXFR' to request a transfer; (C) Dig - the standard Unix tool using 'dig AXFR domain.com @nameserver'; (D) Sam Spade - a Windows-based network investigative tool with a built-in zone transfer feature; (E) Host - use 'host -l domain.com nameserver' to request a transfer. The others do NOT perform zone transfers: Finger (B) queries user account info on remote systems, Netcat (F) is a generic TCP/UDP utility with no DNS zone transfer capability, and Neotrace (G) is a graphical traceroute tool.
Topics
Community Discussion
No community discussion yet for this question.