GSLC · Question #78
Which of the following statements about reconnaissance is true?
The correct answer is C. It describes an attempt to transfer DNS zone data.. DNS zone transfer is a reconnaissance technique used to enumerate all DNS records and map a target network's topology.
Question
Which of the following statements about reconnaissance is true?
Options
- AIt is a computer that is used to attract potential intruders or attackers.
- BIt is any program that allows a hacker to connect to a computer without going through the normal
- CIt describes an attempt to transfer DNS zone data.
- DIt is also known as half-open scanning.
How the community answered
(23 responses)- A4% (1)
- C91% (21)
- D4% (1)
Why each option
DNS zone transfer is a reconnaissance technique used to enumerate all DNS records and map a target network's topology.
This describes a honeypot - a decoy system designed to attract and detect attackers - not a definition or technique of reconnaissance.
This describes a backdoor or Remote Access Trojan (RAT), which is a post-exploitation persistence mechanism, not a reconnaissance activity.
A DNS zone transfer (AXFR request) is an attempt to replicate the complete DNS zone file from a server, which reveals all hostnames, IP addresses, and network structure of a domain. Attackers use this during reconnaissance to map the target environment without active scanning. Misconfigured DNS servers that permit unauthorized zone transfers expose the full internal network layout.
Half-open scanning refers to a TCP SYN port scanning technique used during the scanning phase, not a general definition of reconnaissance.
Concept tested: DNS zone transfer as network reconnaissance technique
Source: https://attack.mitre.org/techniques/T1590/002/
Topics
Community Discussion
No community discussion yet for this question.