nerdexam
GIAC

GISP · Question #158

In the DNS Zone transfer enumeration, an attacker attempts to retrieve a copy of the entire zone file for a domain from a DNS server. The information provided by the DNS zone can help an attacker…

The correct answer is A. Dig B. NSLookup D. Host. See the full explanation below for the reasoning.

Question

In the DNS Zone transfer enumeration, an attacker attempts to retrieve a copy of the entire zone file for a domain from a DNS server. The information provided by the DNS zone can help an attacker gather user names, passwords, and other valuable information. To attempt a zone transfer, an attacker must be connected to a DNS server that is the authoritative server for that zone. Besides this, an attacker can launch a Denial of Service attack against the zone's DNS servers by flooding them with a lot of requests. Which of the following tools can an attacker use to perform a DNS zone transfer? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ADig
  • BNSLookup
  • CWiSniff
  • DHost

How the community answered

(37 responses)
  • A
    78% (29)
  • C
    22% (8)

Community Discussion

No community discussion yet for this question.

Full GISP Practice