Which of the following terms describes an attempt to transfer DNS zone data?

Question

Options

• AReconnaissance
• BSpam
• CDumpster diving
• DEncapsulation

• A
  72% (18)
• B
  4% (1)
• C
  8% (2)
• D
  16% (4)

Explanation

Attempting to transfer DNS zone data is a form of reconnaissance - specifically, an attacker tries to pull the entire DNS zone file from a name server, potentially exposing a complete map of an organization's internal hostnames, IP addresses, and network structure. This makes it a classic information-gathering (recon) technique used in the early stages of an attack.

Why the distractors are wrong:

• B. Spam - unsolicited bulk messaging; has nothing to do with DNS or network enumeration.
• C. Dumpster diving - physical reconnaissance by sifting through discarded trash/documents; no connection to DNS protocols.
• D. Encapsulation - a networking concept where data is wrapped with protocol headers as it moves down the OSI model; unrelated to DNS attacks.

Memory tip: Think of a DNS zone transfer as asking a city hall for the entire phone book of an organization's network. That kind of mass data harvesting before an attack is the definition of recon - you're mapping the terrain before striking.

No community discussion yet for this question.