A penetration tester runs the following command:
dig @ dns01.comptia.local axfr comptia.local
If successful, which of the following types of information would be provided?
A penetration tester runs the following command:
dig @ dns01.comptia.local axfr comptia.local
If successful, which of the following types of information would be provided?
The dig command with the AXFR option is used for a DNS zone transfer. If successful, it retrieves the entire zone file from the DNS server, revealing detailed information about the DNS records in the zone. This typically includes hostnames and their associated IP addresses of internal systems, as well as other DNS resource records.
C. The hostnames and IP addresses of internal systems Explanation: • A. The DNSSEC certificate and CA: This information is related to DNS security extensions and certificate authorities, and would not be provided by a standard AXFR (zone transfer) command. • B. The DHCP scopes and ranges used on the network: DHCP scopes and ranges are managed by DHCP servers and are not part of the DNS zone data. They would not be included in a DNS zone transfer. • C. The hostnames and IP addresses of internal systems: A DNS zone transfer (AXFR) command requests a copy of the entire zone file from a DNS server. If successful, it provides detailed information about the DNS records in the zone, including hostnames, IP addresses, mail servers, and other resource records. • D. The OS and version of the DNS server: This information pertains to the server’s operating system and software version, which is not typically revealed through a DNS zone transfer.
The command performs a DNS zone transfer, which, if successful, reveals detailed information about the DNS records within the domain. This includes hostnames and IP addresses, aiding in mapping the network.
Per cisa.gov: If improperly configured, the DNS server may respond with information about the requested zone, revealing internal network structure and potentially sensitive information.
NOT A Not likely since a DNS zone transfer (axfr) usually provides info about DNS records ( hostnames and IP addresses), but not specifically about DNSSEC certificates and Certificate Authorities (CA). NOT B axfr command is related to DNS and doesn't give info about DHCP scopes and ranges. Option is not relevant to a DNS zone transfer. CORRECT ANSWER IS C) The hostnames and IP addresses of internal systems axfr command is designed to perform a zone transfer, and if successful, would give hostnames and IP addresses of systems within the DNS zone. NOT D focused on DNS records rather than providing info about the DNS server itself.