GCIH · Question #106
Which of the following terms describes an attempt to transfer DNS zone data?
The correct answer is A. Reconnaissance. An attempt to transfer DNS zone data is classified as reconnaissance, a phase in which an attacker collects information about the target network's structure before launching an attack.
Question
Which of the following terms describes an attempt to transfer DNS zone data?
Options
- AReconnaissance
- BEncapsulation
- CDumpster diving
- DSpam
How the community answered
(58 responses)- A91% (53)
- B2% (1)
- C2% (1)
- D5% (3)
Why each option
An attempt to transfer DNS zone data is classified as reconnaissance, a phase in which an attacker collects information about the target network's structure before launching an attack.
A DNS zone transfer (AXFR request) is a technique used during reconnaissance to obtain a complete copy of a DNS zone file, which exposes all hostnames, IP addresses, mail servers, and subdomains of the target. Attackers use this information to map the network topology prior to further attacks. It is a classic passive information-gathering method categorized under the reconnaissance phase of an attack.
Encapsulation is a networking concept describing how protocol headers are added to data as it moves down the OSI model layers, not an information-gathering technique.
Dumpster diving is a physical social engineering technique that involves searching through discarded documents or media for sensitive information, not a DNS-related activity.
Spam refers to unsolicited bulk electronic messages and has no technical relationship to DNS zone data transfers.
Concept tested: DNS zone transfer as network reconnaissance technique
Source: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/02-Test_Application_Platform_Configuration
Topics
Community Discussion
No community discussion yet for this question.