DNS Enumeration Techniques for Penetration Testing

1. Which of the following are valid DNS enumeration techniques? (Select all that apply)

Zone transfers

Brute-force subdomain enumeration

Reverse DNS lookups

Packet sniffing

Submit

2. Which of the following are common DNS enumeration tools and techniques? (Select all that apply)

Nslookup and dig queries

Online DNS databases and historical records

Subdomain wordlist brute-forcing

Physical server inspection

Submit

3. Passive DNS enumeration relies on publicly available DNS information without directly querying the target nameserver.

True

False

Submit

5. Which DNS query type requests a canonical name record that points to another domain name?

CNAME

ALIAS

PTR

SRV

6. DNS wildcard records allow a single DNS entry to match multiple subdomains that do not have explicit records.

True

False

7. Which tool can perform aggressive DNS enumeration including zone transfer attempts and wildcard detection?

Dnsrecon

Ping

Tracert

Ifconfig

Submit

9. DNSSEC is a security extension that provides authentication and integrity for DNS data.

True

False

10. What does the NS record type identify?

Nameservers authoritative for a domain

Network services available

Network address translation

Name server statistics

11. Which DNS record type maps a hostname to its corresponding IPv4 address?

A

AAAA

CNAME

MX

Submit

13. Which DNS query type requests all records in a zone file from an authoritative nameserver?

AXFR

ANY

A

NS

14. DNS enumeration can reveal subdomain names and organizational structure without direct network access.

True

False

15. Which command performs a reverse DNS lookup to find hostnames associated with an IP address?

Dig -x

Nslookup

Host

Whois

Submit

17. Which DNS record type identifies mail servers for a domain?

MX

TXT

SOA

NS

18. DNS zone transfers are restricted to prevent unauthorized access.

True

False

19. Which tool is commonly used to perform DNS enumeration and zone transfers?

Dig

Nmap

Wireshark

Metasploit

20. What is a DNS zone transfer attack, and what DNS record type is commonly used to initiate it?

Copying all DNS records via AXFR query

Modifying DNS cache entries

Spoofing DNS responses

Flooding DNS servers with requests

PenTest+ DNS Enumeration Techniques Quiz

1. Which of the following are valid DNS enumeration techniques? (Select all that apply)

2.

What first name or nickname would you like us to use?

2. Which of the following are common DNS enumeration tools and techniques? (Select all that apply)

3. Passive DNS enumeration relies on publicly available DNS information without directly querying the target nameserver.

4. The ______ record type is used for service discovery and specifies the location of services in a domain.

5. Which DNS query type requests a canonical name record that points to another domain name?

6. DNS wildcard records allow a single DNS entry to match multiple subdomains that do not have explicit records.

7. Which tool can perform aggressive DNS enumeration including zone transfer attempts and wildcard detection?

8. The ______ record type contains text information and is often used for domain verification.

9. DNSSEC is a security extension that provides authentication and integrity for DNS data.

10. What does the NS record type identify?

11. Which DNS record type maps a hostname to its corresponding IPv4 address?

12. The ______ record type maps IPv6 addresses to hostnames.

13. Which DNS query type requests all records in a zone file from an authoritative nameserver?

14. DNS enumeration can reveal subdomain names and organizational structure without direct network access.

15. Which command performs a reverse DNS lookup to find hostnames associated with an IP address?

16. The ______ record contains authoritative information about a DNS zone, including the primary nameserver.

17. Which DNS record type identifies mail servers for a domain?

18. DNS zone transfers are restricted to prevent unauthorized access.

19. Which tool is commonly used to perform DNS enumeration and zone transfers?

20. What is a DNS zone transfer attack, and what DNS record type is commonly used to initiate it?