GCIA · Question #15
Which of the following terms describes an attempt to transfer DNS zone data?
The correct answer is A. Reconnaissance. Attempting a DNS zone transfer (AXFR) is an information-gathering technique classified as reconnaissance, used to enumerate all DNS records in a zone.
Question
Which of the following terms describes an attempt to transfer DNS zone data?
Options
- AReconnaissance
- BEncapsulation
- CDumpster diving
- DSpam
How the community answered
(32 responses)- A75% (24)
- B16% (5)
- C3% (1)
- D6% (2)
Why each option
Attempting a DNS zone transfer (AXFR) is an information-gathering technique classified as reconnaissance, used to enumerate all DNS records in a zone.
A DNS zone transfer request (AXFR) is categorized as reconnaissance because an attacker uses it to retrieve the complete set of DNS resource records from a server, exposing hostnames, IP addresses, mail servers, and overall network topology. This passive or active information-gathering step is a precursor to targeted attacks and directly maps to network and service discovery reconnaissance techniques.
Encapsulation is the process of wrapping data with protocol headers as it traverses the OSI layers and has no relationship to DNS zone data collection.
Dumpster diving is a physical social engineering method involving searching discarded materials for sensitive information, not a network-based DNS attack technique.
Spam refers to unsolicited bulk email messages and is entirely unrelated to DNS zone transfer attempts.
Concept tested: DNS zone transfer as network reconnaissance technique
Source: https://learn.microsoft.com/en-us/windows-server/networking/dns/dns-zones
Topics
Community Discussion
No community discussion yet for this question.