MENU
In the DNS Zone transfer enumeration, an attacker attempts to retrieve a copy of the entire zone file for a domain from a DNS server. The information provided by the DNS zone can help an attacker gather user names, passwords, and other valuable information. To attempt a zone transfer, an attacker must be connected to a DNS server that is the authoritative server for that zone. Besides this, an attacker can launch a Denial of Service attack against the zone's DNS servers by flooding them with a lot of requests. Which of the following tools can an attacker use to perform a DNS zone transfer?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: A, B, C
Get Premium GCIA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
EM
Emilio
11 months ago
Wait, can attackers really get passwords from zone files? That's wild!
ME
Meaghan
11 months ago
DSniff? Not sure about that one...
CA
Catalina
12 months ago
NSLookup works too, right?
AI
Ailene
12 months ago
Host is also a solid choice for this!
DE
Demetra
12 months ago
You can definitely use Dig for zone transfers.
RA
Raul
1 year ago
I practiced using Dig and Host for zone transfers, but I don't remember DSniff being part of our exercises.
SU
Susana
1 year ago
I feel like NSLookup is a safe bet for this question, but I might be mixing it up with other tools we discussed.
PH
Phyliss
1 year ago
I think Host is definitely one of the tools we used in class for zone transfers, but I can't recall if DSniff was mentioned.
LA
Laurel
1 year ago
I remember practicing with Dig and NSLookup for DNS queries, but I'm not entirely sure if both can perform zone transfers.
DO
Donette
1 year ago
This question seems straightforward - I just need to identify the one cost reduction benefit that is not listed. I'll carefully read through the options and think about which one doesn't fit.
KE
Keva
1 year ago
I think the primary objective of a quality improvement program is to reduce the defect rate in IT products and processes, so I'll go with option B.