Worksheets7.2.2 - Recon with NSLookup
Total questions: 1
Worksheet time: 8mins
What does 'passive' recon refer to?
Attacker interacts directly with the target device.
Attacker uses physical tools to gather information.
Attacker is remote and does not interact with the target device.
Attacker is physically present near the target device.
Which of the following is NOT a tool for performing passive recon from DNS?
Whois lookups
Ping command
Google Dorking
nslookup or dig
What is the primary purpose of DNS?
To encrypt data sent over the internet
To provide secure email services
To monitor network traffic
To map Internet names to their corresponding IP addresses
What information can tools researching a domain's DNS records provide?
All IP addresses for their Internet-connected servers
Private email conversations
Encrypted passwords
User browsing history
Which operating systems is nslookup available on?
macOS only
Windows and Linux
Linux only
Windows only
What type of information does the MX record return in nslookup?
Mail server information
Administrator info for domain
IPv4 address information
Text included in the DNS records
Why is there no solution to secure against reconnaissance that uses nslookup searches?
Because all information gathered by nslookup is public
Because the nslookup tool has to work for your domain to be Internet reachable
Because nslookup is a hacking tool
Because nslookup does not exist
What does the A record return in nslookup?
IPv4 address information
Mail server information
Administrator info for domain
IPv6 address information
What is a recommended practice regarding nslookup and domain information?
Frequently changing domain names
Staying current on what info is available from a nslookup of their domain
Blocking all nslookup queries
Encrypting all DNS records
What does the command
nslookup -type=MX cyber.org
return?
ipv4 Address
ipv6 address
information in mail servers
returns administrator info for the domain
True or False
To get from a website name to an IP address, you must have someone do the translation for you and that how DNS works
TRUE
FALSE
