GSLC · Question #166
Which of the following terms describes an attempt to transfer DNS zone data?
The correct answer is A. Reconnaissance. Attempting to transfer DNS zone data is a reconnaissance technique that enumerates all DNS records in a zone to map a target organization's network infrastructure.
Question
Which of the following terms describes an attempt to transfer DNS zone data?
Options
- AReconnaissance
- BDumpster diving
- CSpam
- DEncapsulation
How the community answered
(31 responses)- A94% (29)
- C3% (1)
- D3% (1)
Why each option
Attempting to transfer DNS zone data is a reconnaissance technique that enumerates all DNS records in a zone to map a target organization's network infrastructure.
A DNS zone transfer (AXFR query) is a classic reconnaissance method in which an attacker queries a misconfigured DNS server to retrieve the complete set of DNS records for a domain, exposing hostnames, IP addresses, mail servers, and internal naming conventions. This information-gathering phase directly aids further attack planning by revealing the full topology of a target network before exploitation begins.
Dumpster diving is a physical reconnaissance technique involving searching through discarded documents or media for sensitive information, not a DNS protocol operation.
Spam refers to unsolicited bulk electronic messages and has no relationship to DNS enumeration or zone data retrieval.
Encapsulation is the OSI model process of wrapping data with protocol headers as it descends the stack; it does not describe any form of DNS querying or information gathering.
Concept tested: DNS zone transfer as network reconnaissance
Source: https://owasp.org/www-community/attacks/DNS_Zone_Transfer
Topics
Community Discussion
No community discussion yet for this question.