7.2.2 - Recon with NSLookup

What does 'passive' recon refer to?

• Attacker interacts directly with the target device.

• Attacker uses physical tools to gather information.

• Attacker is remote and does not interact with the target device.

• Attacker is physically present near the target device.

Which of the following is NOT a tool for performing passive recon from DNS?

• Whois lookups

• Ping command

• Google Dorking

• nslookup or dig

What is the primary purpose of DNS?

• To encrypt data sent over the internet

• To provide secure email services

• To monitor network traffic

• To map Internet names to their corresponding IP addresses

What information can tools researching a domain's DNS records provide?

• All IP addresses for their Internet-connected servers

• Private email conversations

• Encrypted passwords

• User browsing history

Which operating systems is nslookup available on?

• macOS only

• Windows and Linux

• Linux only

• Windows only

What type of information does the MX record return in nslookup?

• Mail server information

• Administrator info for domain

• IPv4 address information

• Text included in the DNS records

Why is there no solution to secure against reconnaissance that uses nslookup searches?

• Because all information gathered by nslookup is public

• Because the nslookup tool has to work for your domain to be Internet reachable

• Because nslookup is a hacking tool

• Because nslookup does not exist

What does the A record return in nslookup?

• IPv4 address information

• Mail server information

• Administrator info for domain

• IPv6 address information

What is a recommended practice regarding nslookup and domain information?

• Frequently changing domain names

• Staying current on what info is available from a nslookup of their domain

• Blocking all nslookup queries

• Encrypting all DNS records

What does the command
nslookup -type=MX cyber.org

return?

• ipv4 Address

• ipv6 address

• information in mail servers

• returns administrator info for the domain