nerdexam
CompTIA

PT0-002 · Question #215

A penetration tester is reviewing the following DNS reconnaissance results for comptia.org from dig: ... ;; ANSWER SECTION comptia.org. 3569 IN MX comptia.org-mail.protection.outlook.com…

The correct answer is A. At least one of the records is out of scope. The DNS reconnaissance output reveals an MX record pointing to an external domain (outlook.com), which may fall outside the explicit scope of a penetration test focused solely on comptia.org.

Planning and Scoping

Question

A penetration tester is reviewing the following DNS reconnaissance results for comptia.org from dig:

... ;; ANSWER SECTION comptia.org. 3569 IN MX comptia.org-mail.protection.outlook.com. comptia.org. 3569 IN A 3.219.13.186. comptia.org. 3569 IN NS ns1.comptia.org. comptia.org. 3569 IN SOA haven. administrator.comptia.org. comptia.org. 3569 IN MX new.mx0.comptia.org. comptia.org. 3569 IN MX new.mx1.comptia.org. Which of the following potential issues can the penetration tester identify based on this output?

Options

  • AAt least one of the records is out of scope.
  • BThere is a duplicate MX record.
  • CThe NS record is not within the appropriate domain.
  • DThe SOA records outside the comptia.org domain.

How the community answered

(38 responses)
  • A
    82% (31)
  • B
    3% (1)
  • C
    5% (2)
  • D
    11% (4)

Why each option

The DNS reconnaissance output reveals an MX record pointing to an external domain (`outlook.com`), which may fall outside the explicit scope of a penetration test focused solely on `comptia.org`.

AAt least one of the records is out of scope.Correct

The MX record `comptia.org-mail.protection.outlook.com` points to a domain managed by Microsoft (`outlook.com`), which is typically external and might not be explicitly included in the scope of an assessment focused solely on `comptia.org` assets.

BThere is a duplicate MX record.

Multiple MX records are common and desirable for redundancy and load balancing in email systems, not a duplication error.

CThe NS record is not within the appropriate domain.

The NS record `ns1.comptia.org` is correctly within the `comptia.org` domain, which is standard for authoritative name servers.

DThe SOA records outside the comptia.org domain.

The SOA record identifies `administrator.comptia.org` as the responsible party, which is an email address formatted within the `comptia.org` domain, not outside of it.

Concept tested: DNS reconnaissance scope identification

Source: https://learn.microsoft.com/en-us/windows-server/networking/dns/what-is-dns

Topics

#DNS reconnaissance#Scoping#Information Gathering

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PT0-002 Practice