312-50V13 · Question #453
Henry is a penetration tester who works for XYZ organization. While performing enumeration on a client organization, he queries the DNS server for a specific cached DNS record. Further, by using…
The correct answer is B. DNS cache snooping. Henry performed DNS cache snooping by querying a DNS server for cached records to determine the websites recently visited by the organization's users.
Question
Options
- ADNS zone walking
- BDNS cache snooping
- CDNS SEC zone walking
- DDNS cache poisoning
How the community answered
(26 responses)- A4% (1)
- B92% (24)
- C4% (1)
Why each option
Henry performed DNS cache snooping by querying a DNS server for cached records to determine the websites recently visited by the organization's users.
DNS zone walking involves querying a DNS server to enumerate all records within a specific DNS zone, typically to discover hostnames and IP addresses, rather than focusing on cached records for user activity.
DNS cache snooping is an enumeration technique where an attacker queries a DNS server for records that are present in its cache. By observing which domain names have been recently resolved and are thus cached, the attacker can infer the internet activity of the organization's users or identify internal network resources being accessed, without directly querying authoritative servers.
DNSSEC zone walking is a technique used to enumerate records from a DNSSEC-signed zone by leveraging NSEC records to discover domain names, which is a specific form of zone walking, not cache snooping.
DNS cache poisoning is an attack where forged DNS data is injected into a DNS resolver's cache, causing it to return incorrect IP addresses, rather than an enumeration technique for discovering visited sites.
Concept tested: DNS enumeration techniques
Source: https://www.cloudflare.com/learning/dns/dns-cache-snooping/
Topics
Community Discussion
No community discussion yet for this question.