nerdexam
EC-Council

312-50V13 · Question #229

Gerard, a disgruntled ex-employee of Sunglass IT Solutions, targets this organization to perform sophisticated attacks and bring down its reputation in the market. To launch the attacks process, he…

The correct answer is D. Bluto. Bluto (Option D) is correct because it is a DNS reconnaissance tool specifically designed to perform DNS footprinting by retrieving information such as DNS zone data, domain names, computer names, IP addresses, DNS records, and WHOIS records - precisely matching the activities…

Submitted by tunde_lagos· Mar 6, 2026Footprinting and Reconnaissance

Question

Gerard, a disgruntled ex-employee of Sunglass IT Solutions, targets this organization to perform sophisticated attacks and bring down its reputation in the market. To launch the attacks process, he performed DNS footprinting to gather information about ONS servers and to identify the hosts connected in the target network. He used an automated tool that can retrieve information about DNS zone data including DNS domain names, computer names. IP addresses. DNS records, and network Who is records. He further exploited this information to launch other sophisticated attacks. What is the tool employed by Gerard in the above scenario?

Options

  • AKnative
  • BzANTI
  • CTowelroot
  • DBluto

How the community answered

(31 responses)
  • A
    3% (1)
  • C
    10% (3)
  • D
    87% (27)

Explanation

Bluto (Option D) is correct because it is a DNS reconnaissance tool specifically designed to perform DNS footprinting by retrieving information such as DNS zone data, domain names, computer names, IP addresses, DNS records, and WHOIS records - precisely matching the activities described in the scenario.

Why the distractors are wrong:

  • Knative (A) is an open-source platform for deploying serverless and containerized applications on Kubernetes - it has no relevance to DNS footprinting or reconnaissance.
  • zANTI (B) is a mobile penetration testing toolkit used for network scanning and man-in-the-middle attacks, not specifically DNS footprinting.
  • Towelroot (C) is an Android rooting tool used to gain root access on mobile devices, completely unrelated to DNS reconnaissance.

Memory Tip: Think of "Bluto" as "Blew through the DNS" - just like the aggressive Popeye villain Bluto forces his way in, Bluto the tool aggressively digs through DNS records to expose network information. If a CEH exam question mentions automated DNS zone data retrieval including WHOIS records in a footprinting context, Bluto is your answer.

Topics

#DNS Footprinting#Reconnaissance Tools#DNS Enumeration#Information Gathering

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice