MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What is a DNS zone transfer in networking?
a. The process of copying the contents of a zone file from a primary DNS server to a secondary DNS server for redundancy and consistency.
b. The process of changing IP addresses in a DNS server.
c. The method for encrypting DNS queries.
d. The service for blocking unauthorized DNS requests.
Answer: a. The process of copying the contents of a zone file from a primary DNS server to a secondary DNS server for redundancy and consistency.sciencedirect+2
Which of the following protocols is used for DNS zone transfers?
a. TCP
b. UDP
c. HTTP
d. FTP
Answer: a. TCPwikipedia+2
What is the primary reason for using DNS zone transfers?
a. Synchronize DNS data between primary and secondary servers for availability and fault tolerance.
b. Encrypt DNS records.
c. Compress DNS data.
d. Redirect web traffic.
Answer: a. Synchronize DNS data between primary and secondary servers for availability and fault tolerance.cbtnuggets+2
Which type of DNS zone transfer copies the entire zone file?
a. AXFR
b. IXFR
c. MXFR
d. RXFR
Answer: a. AXFRdevelopers.cloudflare+2
What is the main purpose of an incremental zone transfer (IXFR)?
a. Transfer only changes made since the last transfer, reducing bandwidth usage.
b. Encrypt the entire zone file.
c. Block unauthorized servers.
d. Split DNS records alphabetically.
Answer: a. Transfer only changes made since the last transfer, reducing bandwidth usage.exam-labs+3
What critical record initiates the DNS zone transfer process?
a. SOA Record
b. MX Record
c. CNAME Record
d. PTR Record
Answer: a. SOA Recordjumpcloud+3
Which port does a DNS zone transfer typically use?
a. 53
b. 80
c. 25
d. 443
Answer: a. 53beaglesecurity+1
What happens if the serial number in the SOA record on the primary server is higher than that on the secondary server?
a. A zone transfer is initiated.
b. The secondary server is deleted.
c. All records are encrypted.
d. No action occurs.
Answer: a. A zone transfer is initiated.exam-labs+2
What is a risk of unprotected DNS zone transfers?
a. Exposure of sensitive domain and internal network information to attackers.
b. Increase in DNS resolution speed.
c. Reduction in web traffic.
d. Increase in storage usage only.
Answer: a. Exposure of sensitive domain and internal network information to attackers.falconcloud+3
Which type of transfer occurs when a secondary server requests the entire DNS zone file?
a. Full zone transfer (AXFR)
b. Partial zone transfer (PXFR)
c. Secure zone transfer (SZFR)
d. Synchronized zone transfer (SZTR)
Answer: a. Full zone transfer (AXFR)acunetix+3
How can administrators limit zone transfers to trusted servers?
a. By configuring allowed IP addresses or access control lists (ACLs).
b. By disabling DNS entirely.
c. By only using UDP instead of TCP.
d. By encrypting all DNS queries.
Answer: a. By configuring allowed IP addresses or access control lists (ACLs).learn.microsoft+1
What mechanism allows immediate update notifications to secondary DNS servers about zone changes?
a. NOTIFY messages
b. MX triggers
c. UDP echo requests
d. Address masking
Answer: a. NOTIFY messagesjumpcloud+1
What could an attacker gain from an unauthorized zone transfer?
a. Complete list of subdomains and IP addresses of internal systems.
b. Passwords stored in clear text.
c. Encrypted email content.
d. Randomized DNS cache entries.
Answer: a. Complete list of subdomains and IP addresses of internal systems.securelayer7+3
When does a secondary DNS server typically request a zone transfer?
a. When its refresh interval expires or upon receiving a NOTIFY message.
b. After every DNS query from a client.
c. At server startup only.
d. Only upon user request.
Answer: a. When its refresh interval expires or upon receiving a NOTIFY message.cbtnuggets+2
What should be avoided to reduce the risk of DNS zone transfer vulnerabilities?
a. Allowing zone transfers to any host.
b. Restricting all transfers to secondary servers.
c. Encrypting all DNS data.
d. Updating the zone file daily.
Answer: a. Allowing zone transfers to any host.heimdalsecurity+2
Which DNS record’s serial number is checked to determine if a zone transfer is needed?
a. SOA
b. MX
c. AAAA
d. PTR
Answer: a. SOAbeaglesecurity+1
Who are the typical participants in a DNS zone transfer?
a. Primary (master) and secondary (slave) DNS servers.
b. Client and router.
c. Mail server and web server.
d. Firewall and switch.
Answer: a. Primary (master) and secondary (slave) DNS servers.sciencedirect+2
What data does a DNS zone file include?
a. All DNS records for a portion of the namespace managed by a single authority.
b. Only email server addresses.
c. Only external IP addresses.
d. Only SSL certificate details.
Answer: a. All DNS records for a portion of the namespace managed by a single authority.geeksforgeeks+2
What is a slave server in DNS?
a. A secondary DNS server that receives zone transfers from the master server.
b. The only DNS server in a local network.
c. A server managing email delivery.
d. A server that blocks DNS queries.
Answer: a. A secondary DNS server that receives zone transfers from the master server.sciencedirect+1
Which DNS zone transfer type is more bandwidth efficient?
a. IXFR (Incremental)
b. AXFR (Full)
c. TXTFR (Text-based)
d. RXFR (Reverse)
Answer: a. IXFR (Incremental)developers.cloudflare+3
What security feature can authenticate DNS zone transfers between servers?
a. TSIG (Transaction Signature)
b. HTTPS tunnel
c. DNSSEC encryption
d. Public browsing
Answer: a. TSIG (Transaction Signature)falconcloud+1
What is a potential impact of a misconfigured DNS zone transfer?
a. Leaking of internal infrastructure details to external parties.
b. Faster DNS query responses.
c. Increase in DNSSEC validation.
d. Automated SSL certificate generation.
Answer: a. Leaking of internal infrastructure details to external parties.securelayer7+3
What best describes the information in a DNS zone transfer vulnerability assessment?
a. Identification of name servers allowing unauthorized transfers.
b. Monitoring DNS query performance.
c. Enabling ASLR protection.
d. Optimizing load balancing.
Answer: a. Identification of name servers allowing unauthorized transfers.heimdalsecurity+1
Why should zone transfers only be allowed to specific IP addresses?
a. To prevent unauthorized access to sensitive DNS data.
b. To speed up DNS propagation.
c. For compliance with GDPR.
d. To allow load balancing.
Answer: a. To prevent unauthorized access to sensitive DNS data.learn.microsoft+1
How does the SOA serial number affect zone transfers?
a. If the primary’s serial number is higher, a transfer is triggered.
b. If the secondary’s serial number is higher, data is deleted.
c. It encrypts all transferred data.
d. It sets SMTP relay limits.
Answer: a. If the primary’s serial number is higher, a transfer is triggered.cbtnuggets+1
What is the primary function of NS records regarding DNS zone transfers?
a. Identify authorized DNS servers for the zone, including those eligible for transfers.
b. Encrypt all DNS queries.
c. Block non-HTTP traffic.
d. Provide IPs for VPN tunnels.
Answer: a. Identify authorized DNS servers for the zone, including those eligible for transfers.jumpcloud+1
Which scenario would require a full zone transfer (AXFR)?
a. Setting up a new secondary DNS server.
b. Changing only one DNS record.
c. Routine email delivery.
d. Web server configuration.
Answer: a. Setting up a new secondary DNS server.acunetix+3
What is the function of the refresh interval in a DNS SOA record?
a. Specifies how often the secondary server should check for updates.
b. Sets the DNS query timeout.
c. Determines the length of IP leases.
d. Encrypts DNS data.
Answer: a. Specifies how often the secondary server should check for updates.beaglesecurity+2
What kind of information does an attacker typically look for in a leaked zone file?
a. Subdomains, hostnames, internal IPs, and service configurations.
b. Browser cache data.
c. SSL certificate expiration dates.
d. DNSSEC public keys only.
Answer: a. Subdomains, hostnames, internal IPs, and service configurations.falconcloud+3
Which DNS message section typically contains the SOA record for a zone transfer?
a. Answer section
b. Additional section
c. Authority section
d. Header section
Answer: c. Authority sectiondspace.cvut
What technique is NOT recommended for securing DNS zone transfers?
a. Allowing transfers to any requesting host.
b. Restricting transfers using ACLs.
c. Implementing TSIG authentication.
d. Limiting transfer access via IP.
Answer: a. Allowing transfers to any requesting host.learn.microsoft+2
Which RFC first formalized DNS NOTIFY messages for prompt zone transfer updates?
a. RFC 1996
b. RFC 1035
c. RFC 2136
d. RFC 1918
Answer: a. RFC 1996learn.microsoft
If a secondary server can’t support IXFR, what happens during a transfer?
a. The primary server defaults to a full zone transfer (AXFR).
b. The transfer fails completely.
c. The transfer uses UDP encryption.
d. An error notification is sent to all clients.
Answer: a. The primary server defaults to a full zone transfer (AXFR).cbtnuggets
How often do secondary servers typically poll the primary server for SOA serial updates?
a. As defined by the refresh interval in the SOA record (commonly 15 minutes).
b. Once per day.
c. After every DNS query from clients.
d. Only at startup.
Answer: a. As defined by the refresh interval in the SOA record (commonly 15 minutes).cbtnuggets+1
Which tool can manually initiate a DNS zone transfer for testing?
a. dig
b. ping
c. traceroute
d. netstat
Answer: a. digyoutubejumpcloud
What could signify an open DNS resolver that is vulnerable to unauthorized zone transfers?
a. It responds to AXFR requests from any source.
b. It blocks all TCP traffic.
c. It only accepts IXFR.
d. It requires RDP authentication.
Answer: a. It responds to AXFR requests from any source.exam-labs+2
What is the main drawback of frequent full zone transfers?
a. Increased bandwidth and resource usage.
b. Reduced record accuracy.
c. Slower DNSSEC validation.
d. Only applicable to email records.
Answer: a. Increased bandwidth and resource usage.acunetix+2
What happens during a zone transfer if the SOA record serials match?
a. No zone transfer occurs.
b. All data are synchronized regardless.
c. The secondary server deletes its records.
d. The primary server disables itself.
Answer: a. No zone transfer occurs.exam-labs+2
Which DNS record provides primary control of zone serial numbers?
a. SOA
b. NS
c. MX
d. CNAME
Answer: a. SOAbeaglesecurity+1
What is one example of DNS zone transfer misuse in security assessments?
a. Enumerating all available hosts and subdomains for a target.
b. Performing brute force password attacks.
c. Flooding the network with UDP traffic.
d. Logging user browsing history.
Answer: a. Enumerating all available hosts and subdomains for a target.securelayer7+2
Which subset of data does IXFR transfer?
a. Only the records that have changed since the last zone transfer.
b. All DNS records, regardless of changes.
c. Only MX records.
d. Only NS records.
Answer: a. Only the records that have changed since the last zone transfer.developers.cloudflare+3
Which common command-line tool (besides dig) can test for zone transfer vulnerabilities?
a. nslookup
b. curl
c. wget
d. ssh
Answer: a. nslookupyoutube
What is a simple way to check if a DNS server allows AXFR zone transfers?
a. Issue a dig AXFR command targeting the server with the domain name.
b. Send an HTTPS request.
c. Open a web browser to the DNS server’s IP.
d. Send a ping request to port 80.
Answer: a. Issue a dig AXFR command targeting the server with the domain name.youtubejumpcloud
What is a common practice to improve DNS zone transfer security?
a. Use TSIG keys to authenticate servers.
b. Allow transfers to all requesting servers.
c. Publish AXFR records externally.
d. Hide the SOA record.
Answer: a. Use TSIG keys to authenticate servers.falconcloud+1
Which attack can result from successful exploitation of DNS zone transfer vulnerabilities?
a. Infrastructure fingerprinting that aids further attacks.
b. Injecting HTTP headers.
c. ARP poisoning.
d. TLS handshake interception.
Answer: a. Infrastructure fingerprinting that aids further attacks.heimdalsecurity+2
Why is TCP preferred over UDP for zone transfers?
a. TCP ensures reliable and ordered delivery for the larger data size of zone files.
b. UDP allows faster transmission by nature.
c. DNS zone data is always under 512 bytes.
d. Only UDP supports ACLs.
Answer: a. TCP ensures reliable and ordered delivery for the larger data size of zone files.wikipedia+2
What role does the Authority section play in DNS zone transfers?
a. Contains authoritative data, such as SOA and NS records, critical during transfers.
b. Sends error codes only.
c. Holds only client queries.
d. Maintains browser cache history.
Answer: a. Contains authoritative data, such as SOA and NS records, critical during transfers.dspace.cvut
What is the function of the expire interval in the SOA record?
a. Specifies how long the secondary server will attempt to contact the primary before discarding its zone data.
b. Determines the minimum TTL for DNS records.
c. Sets the DNS resolver cache period.
d. Defines allowed number of requests per minute.
Answer: a. Specifies how long the secondary server will attempt to contact the primary before discarding its zone data.jumpcloud+1
What is the effect if a secondary server fails to contact the primary within the expire time?
a. The secondary discards its local copy of the zone data.
b. The primary server resets itself.
c. All DNS queries are redirected to root servers.
d. No impact; service continues as normal.
Answer: a. The secondary discards its local copy of the zone data.jumpcloud+1
Which best practice should administrators follow regarding DNS zone transfers?
a. Restrict zone transfers to authorized secondary servers using both ACLs and TSIG authentication.
b. Allow any host to perform zone transfers for redundancy.
c. Only use UDP for all zone transfers.
d. Always disable SOA record version control.
Answer: a. Restrict zone transfers to authorized secondary servers using both ACLs and TSIG authentication.falconcloud+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info