During a reconnaissance effort, a team uncovers hostnames by referencing known addresses. Which of the following is the best outcome from applying this method?
Matching each address with a definitive roster of valid servers
More insight into resources that are not found with forward queries
Acquiring authentication credentials from the zone files
Overwriting existing zone records to reroute traffic
Using a method that identifies hostnames tied to known addresses can reveal hidden infrastructure not detected by forward lookups. This helps examiners discover additional targets or services. Other choices either involve functions that do not relate to acquiring new information about unknown hosts or are unrealistic outcomes of this type of query.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a forward query in the context of DNS?
Open an interactive chat with Bash
What is reverse DNS, and how does it differ from forward DNS?
Open an interactive chat with Bash
Why is discovering additional services or infrastructure critical in penetration testing?