nerdexam
EC-Council

312-50V13 · Question #91

Which of the following statements about a zone transfer is correct? (Choose three.)

The correct answer is A. A zone transfer is accomplished with the DNS C. A zone transfer passes all zone information that a DNS server maintains E. A zone transfer can be prevented by blocking all inbound TCP port 53 connections. DNS zone transfers are a fundamental part of the Domain Name System, facilitating the replication of entire zone data between authorized DNS servers and primarily utilize TCP port 53.

Submitted by wei.xz· Mar 6, 2026Footprinting and Reconnaissance

Question

Which of the following statements about a zone transfer is correct? (Choose three.)

Options

  • AA zone transfer is accomplished with the DNS
  • BA zone transfer is accomplished with the nslookup service
  • CA zone transfer passes all zone information that a DNS server maintains
  • DA zone transfer passes all zone information that a nslookup server maintains
  • EA zone transfer can be prevented by blocking all inbound TCP port 53 connections
  • FZone transfers cannot occur on the Internet

How the community answered

(42 responses)
  • A
    90% (38)
  • B
    2% (1)
  • D
    2% (1)
  • F
    5% (2)

Why each option

DNS zone transfers are a fundamental part of the Domain Name System, facilitating the replication of entire zone data between authorized DNS servers and primarily utilize TCP port 53.

AA zone transfer is accomplished with the DNSCorrect

A zone transfer is an integral operation within the DNS protocol, enabling secondary DNS servers to synchronize their zone data with primary DNS servers.

BA zone transfer is accomplished with the nslookup service

Nslookup is a client-side utility for querying DNS, not a service that accomplishes zone transfers itself; it can be used to *initiate* a zone transfer query, but isn't the underlying mechanism.

CA zone transfer passes all zone information that a DNS server maintainsCorrect

A full zone transfer (AXFR) copies all resource records and their associated data for a specific DNS zone from the primary server to a secondary server, ensuring data consistency.

DA zone transfer passes all zone information that a nslookup server maintains

Nslookup is a client tool and does not maintain zone information; DNS servers maintain zone information.

EA zone transfer can be prevented by blocking all inbound TCP port 53 connectionsCorrect

Zone transfers primarily use TCP port 53. Blocking inbound connections to TCP port 53 on a DNS server will prevent any external entity from performing a zone transfer to or from that server.

FZone transfers cannot occur on the Internet

Zone transfers routinely occur over the Internet between authorized DNS servers for various domains, provided that network connectivity and DNS configurations (like firewall rules for TCP port 53) allow it.

Concept tested: DNS zone transfer characteristics

Source: https://learn.microsoft.com/en-us/windows-server/networking/dns/deploy/zone-transfers

Topics

#zone transfer#DNS#TCP port 53#zone information

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V13 Practice