Which tool performs DNS enumeration, discovering subdomains, mail servers, and DNS records for a target domain?
- A.Nmap
- B.Wireshark
- C.Metasploit
- D.dig/nslookup or dnsrecon/dnsenum
Why D is correct
dig and nslookup query DNS records. Specialized tools like dnsrecon, dnsenum, fierce, and Amass perform comprehensive DNS enumeration: subdomain discovery, zone transfer attempts, brute-force subdomain enumeration, and DNS record analysis. This is a critical step in reconnaissance for penetration testing.
Know someone studying for Security Fundamentals? Send them this one.