nerdexam
EC-Council

312-50V12 · Question #177

A certified ethical hacker is conducting a Whois footprinting activity on a specific domain. The individual is leveraging various tools such as Batch IP Converter and Whois Analyzer Pro to retrieve…

The correct answer is D. Thick Whois model working correctly. When a hacker cannot gather complete Whois information from a registrar, it indicates that the registrar likely uses a Thick Whois model that correctly stores all data but applies privacy protections, limiting publicly visible details.

Submitted by mateo_ar· Mar 4, 2026Reconnaissance Techniques

Question

A certified ethical hacker is conducting a Whois footprinting activity on a specific domain. The individual is leveraging various tools such as Batch IP Converter and Whois Analyzer Pro to retrieve vital details but is unable to gather complete Whois information from the registrar for a particular set of data. As the hacker, what might be the probable data model being utilized by the domain's registrar for storing and looking up Whois information?

Options

  • AThin Whois model working correctly
  • BThin Whois model with a malfunctioning server
  • CThick Whois model with a malfunctioning server
  • DThick Whois model working correctly

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    10% (2)
  • D
    81% (17)

Why each option

When a hacker cannot gather complete Whois information from a registrar, it indicates that the registrar likely uses a Thick Whois model that correctly stores all data but applies privacy protections, limiting publicly visible details.

AThin Whois model working correctly

In a Thin Whois model, the registrar inherently stores only minimal information and points to the registry for complete details, so being unable to gather complete information from the registrar alone is expected behavior, not a specific issue.

BThin Whois model with a malfunctioning server

A Thin Whois model with a malfunctioning server would imply technical issues preventing even the minimal data or registry pointers from being retrieved, which is not specified by the scenario of merely incomplete information.

CThick Whois model with a malfunctioning server

A Thick Whois model with a malfunctioning server would typically result in a complete failure to retrieve any Whois data, or incorrect/corrupted data, rather than just incomplete information for 'a particular set of data'.

DThick Whois model working correctlyCorrect

In a Thick Whois model, the registrar directly stores all registrant and technical contact information. If this model is working correctly, it means the registrar possesses the complete data; however, the inability to gather complete information by the hacker often indicates that privacy protection services, such as Whois privacy or GDPR redaction, are active, obscuring some details from public queries while the underlying data model functions as intended.

Concept tested: Whois data models (Thin vs. Thick) and privacy.

Source: https://support.dnsimple.com/articles/whois-thin-vs-thick/

Topics

#Whois#footprinting#Thin Whois#Thick Whois

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice