nerdexam
EC-Council

312-50V13 · Question #453

Henry is a penetration tester who works for XYZ organization. While performing enumeration on a client organization, he queries the DNS server for a specific cached DNS record. Further, by using…

The correct answer is B. DNS cache snooping. Henry performed DNS cache snooping by querying a DNS server for cached records to determine the websites recently visited by the organization's users.

Submitted by devops_kid· Mar 6, 2026Enumeration

Question

Henry is a penetration tester who works for XYZ organization. While performing enumeration on a client organization, he queries the DNS server for a specific cached DNS record. Further, by using this cached record, he determines the sites recently visited by the organization's user. What is the enumeration technique used by Henry on the organization?

Options

  • ADNS zone walking
  • BDNS cache snooping
  • CDNS SEC zone walking
  • DDNS cache poisoning

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    92% (24)
  • C
    4% (1)

Why each option

Henry performed DNS cache snooping by querying a DNS server for cached records to determine the websites recently visited by the organization's users.

ADNS zone walking

DNS zone walking involves querying a DNS server to enumerate all records within a specific DNS zone, typically to discover hostnames and IP addresses, rather than focusing on cached records for user activity.

BDNS cache snoopingCorrect

DNS cache snooping is an enumeration technique where an attacker queries a DNS server for records that are present in its cache. By observing which domain names have been recently resolved and are thus cached, the attacker can infer the internet activity of the organization's users or identify internal network resources being accessed, without directly querying authoritative servers.

CDNS SEC zone walking

DNSSEC zone walking is a technique used to enumerate records from a DNSSEC-signed zone by leveraging NSEC records to discover domain names, which is a specific form of zone walking, not cache snooping.

DDNS cache poisoning

DNS cache poisoning is an attack where forged DNS data is injected into a DNS resolver's cache, causing it to return incorrect IP addresses, rather than an enumeration technique for discovering visited sites.

Concept tested: DNS enumeration techniques

Source: https://www.cloudflare.com/learning/dns/dns-cache-snooping/

Topics

#DNS cache snooping#DNS enumeration#cached DNS records#reconnaissance

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice