Skip to content
PT0-003
Reconnaissance and Enumeration
hard
Question 9 of 21

A penetration tester is performing DNS enumeration against a target domain and discovers that the target's DNS server responds to zone transfer requests from any IP address. Which attack technique does this misconfiguration enable, and what information does it expose?

ADNS cache poisoning; it allows the attacker to inject false DNS records
BDNS zone transfer (AXFR); it exposes the complete list of DNS records including subdomains, mail servers, and internal hostnames
CDNS amplification; it allows the attacker to use the DNS server in DDoS attacks
DDNS hijacking; it allows the attacker to redirect all domain traffic

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion