CyberCertPrepSecurity FundamentalsSecurity ToolsEASYFree question
Which tool performs DNS enumeration, discovering subdomains, mail servers, and DNS records for a target domain?
- A.A. Nmap
- B.D. Wireshark
- C.C. Metasploit
- D.B. dig/nslookup or dnsrecon/dnsenum
Why D is correct
dig and nslookup query DNS records. Specialized tools like dnsrecon, dnsenum, fierce, and Amass perform comprehensive DNS enumeration: subdomain discovery, zone transfer attempts, brute-force subdomain enumeration, and DNS record analysis. This is a critical step in reconnaissance for penetration testing.
Know someone studying for Security Fundamentals? Send them this one.