nerdexam
GIAC

GCIH · Question #642

Jill ran the following command below against a DNS server. But the command did not work. What other command can Jill use to accomplish the same task?

The correct answer is D. $ dig @45.79.151.23 192.12.4.6 -t AXFR. The dig command with the AXFR record type performs a DNS zone transfer; correct syntax places the authoritative nameserver after '@' and the target zone as the subsequent argument.

Reconnaissance, Scanning, and Enumeration

Question

Jill ran the following command below against a DNS server. But the command did not work. What other command can Jill use to accomplish the same task?

Options

  • A$ dig @192.12.4.6 45.79.151.23 -t AXFR
  • B$ arp @45.79.151.23 192.12.4.6 -t AXFR
  • C$ arp @192.12.4.6 45.79.151.23 -t AXFR
  • D$ dig @45.79.151.23 192.12.4.6 -t AXFR

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    4% (1)
  • D
    89% (25)

Why each option

The dig command with the AXFR record type performs a DNS zone transfer; correct syntax places the authoritative nameserver after '@' and the target zone as the subsequent argument.

A$ dig @192.12.4.6 45.79.151.23 -t AXFR

This command reverses the server and zone arguments, querying 192.12.4.6 as the nameserver for a zone at 45.79.151.23, producing incorrect or failed results.

B$ arp @45.79.151.23 192.12.4.6 -t AXFR

The 'arp' command manages the ARP cache for layer-2 address resolution and has no capability to send DNS queries or perform AXFR zone transfers.

C$ arp @192.12.4.6 45.79.151.23 -t AXFR

Like option B, 'arp' is an ARP utility and cannot perform DNS zone transfers regardless of the arguments or flags supplied.

D$ dig @45.79.151.23 192.12.4.6 -t AXFRCorrect

The command 'dig @45.79.151.23 192.12.4.6 -t AXFR' correctly targets the authoritative DNS server at 45.79.151.23 and requests a full zone transfer for the zone associated with 192.12.4.6. The '@' symbol specifies which nameserver to query, and the AXFR type instructs it to return the entire zone dataset.

Concept tested: DNS zone transfer using dig AXFR request syntax

Source: https://linux.die.net/man/1/dig

Topics

#DNS zone transfer#dig command#AXFR#DNS enumeration

Community Discussion

No community discussion yet for this question.

Full GCIH Practice