nerdexam
GIAC

GCIA · Question #15

Which of the following terms describes an attempt to transfer DNS zone data?

The correct answer is A. Reconnaissance. Attempting a DNS zone transfer (AXFR) is an information-gathering technique classified as reconnaissance, used to enumerate all DNS records in a zone.

Threat Hunting & Timeline Analysis

Question

Which of the following terms describes an attempt to transfer DNS zone data?

Options

  • AReconnaissance
  • BEncapsulation
  • CDumpster diving
  • DSpam

How the community answered

(32 responses)
  • A
    75% (24)
  • B
    16% (5)
  • C
    3% (1)
  • D
    6% (2)

Why each option

Attempting a DNS zone transfer (AXFR) is an information-gathering technique classified as reconnaissance, used to enumerate all DNS records in a zone.

AReconnaissanceCorrect

A DNS zone transfer request (AXFR) is categorized as reconnaissance because an attacker uses it to retrieve the complete set of DNS resource records from a server, exposing hostnames, IP addresses, mail servers, and overall network topology. This passive or active information-gathering step is a precursor to targeted attacks and directly maps to network and service discovery reconnaissance techniques.

BEncapsulation

Encapsulation is the process of wrapping data with protocol headers as it traverses the OSI layers and has no relationship to DNS zone data collection.

CDumpster diving

Dumpster diving is a physical social engineering method involving searching discarded materials for sensitive information, not a network-based DNS attack technique.

DSpam

Spam refers to unsolicited bulk email messages and is entirely unrelated to DNS zone transfer attempts.

Concept tested: DNS zone transfer as network reconnaissance technique

Source: https://learn.microsoft.com/en-us/windows-server/networking/dns/dns-zones

Topics

#DNS zone transfer#reconnaissance#AXFR#information gathering

Community Discussion

No community discussion yet for this question.

Full GCIA Practice