SY0-701 · Question #421
A security analyst is reviewing the logs on an organization's DNS server and notices the following unusual snippet: Which of the following attack techniques was most likely used?
The correct answer is C. Footprinting the internal network. A DNS AXFR (zone transfer) is typically used between DNS servers to replicate DNS databases. However, when improperly secured, an attacker can request a zone transfer to enumerate internal resources, which exposes internal IPs and hostnames. This is a footprinting technique - gat
Question
A security analyst is reviewing the logs on an organization's DNS server and notices the following unusual snippet:
Which of the following attack techniques was most likely used?
Exhibit
Options
- ADetermining the organization's ISP-assigned address space
- BBypassing the organization's DNS sinkholing
- CFootprinting the internal network
- DAttempting to achieve initial access to the DNS server
- EExfiltrating data from fshare.int.complia.org
How the community answered
(30 responses)- A27% (8)
- B13% (4)
- C53% (16)
- D3% (1)
- E3% (1)
Explanation
A DNS AXFR (zone transfer) is typically used between DNS servers to replicate DNS databases. However, when improperly secured, an attacker can request a zone transfer to enumerate internal resources, which exposes internal IPs and hostnames. This is a footprinting technique - gathering information about the internal structure of the network before launching more targeted
Community Discussion
No community discussion yet for this question.
