nerdexam
GIAC

GSLC · Question #166

Which of the following terms describes an attempt to transfer DNS zone data?

The correct answer is A. Reconnaissance. Attempting to transfer DNS zone data is a reconnaissance technique that enumerates all DNS records in a zone to map a target organization's network infrastructure.

Security Operations & Incident Response Leadership

Question

Which of the following terms describes an attempt to transfer DNS zone data?

Options

  • AReconnaissance
  • BDumpster diving
  • CSpam
  • DEncapsulation

How the community answered

(31 responses)
  • A
    94% (29)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Attempting to transfer DNS zone data is a reconnaissance technique that enumerates all DNS records in a zone to map a target organization's network infrastructure.

AReconnaissanceCorrect

A DNS zone transfer (AXFR query) is a classic reconnaissance method in which an attacker queries a misconfigured DNS server to retrieve the complete set of DNS records for a domain, exposing hostnames, IP addresses, mail servers, and internal naming conventions. This information-gathering phase directly aids further attack planning by revealing the full topology of a target network before exploitation begins.

BDumpster diving

Dumpster diving is a physical reconnaissance technique involving searching through discarded documents or media for sensitive information, not a DNS protocol operation.

CSpam

Spam refers to unsolicited bulk electronic messages and has no relationship to DNS enumeration or zone data retrieval.

DEncapsulation

Encapsulation is the OSI model process of wrapping data with protocol headers as it descends the stack; it does not describe any form of DNS querying or information gathering.

Concept tested: DNS zone transfer as network reconnaissance

Source: https://owasp.org/www-community/attacks/DNS_Zone_Transfer

Topics

#DNS zone transfer#reconnaissance#network attacks

Community Discussion

No community discussion yet for this question.

Full GSLC Practice