Blog

MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.


  1. What is the main purpose of dnsenum in cybersecurity?
    a. To encrypt DNS traffic
    b. To enumerate DNS information about a domain
    c. To break into DNS servers
    d. To block DNS requests
    Answer: b. To enumerate DNS information about a domainhacking-notes+2
  2. Which programming language is dnsenum primarily written in?
    a. Python
    b. Ruby
    c. Perl
    d. Bash
    Answer: c. Perllinkedin+2
  3. What type of record does dnsenum retrieve to identify the main IP address of a domain?
    a. MX
    b. NS
    c. A
    d. TXT
    Answer: c. Akali
  4. Which dnsenum feature attempts to get a complete list of DNS records through misconfigured nameservers?
    a. Google scraping
    b. Zone Transfer
    c. Subdomain brute-force
    d. Reverse Lookup
    Answer: b. Zone Transferhacking-notes+1
  5. dnsenum can perform brute-force enumeration to discover which of the following?
    a. Admin passwords
    b. Subdomains
    c. SSL certificates
    d. Open ports
    Answer: b. Subdomainslinkedin+2
  6. What does the “MX” record listed by dnsenum represent?
    a. Mail exchange server
    b. Media exchange server
    c. Main external server
    d. Memory expansion
    Answer: a. Mail exchange serverkali
  7. Which flag in dnsenum is used to provide a custom wordlist for subdomain brute-forcing?
    a. -o
    b. -f
    c. -h
    d. -p
    Answer: b. -fawjunaid+1
  8. Which of the following describes a “Reverse Lookup” performed by dnsenum?
    a. IP address to domain name resolution
    b. Domain name to IP address mapping
    c. Decrypting encrypted DNS records
    d. Gathering TLS certificates
    Answer: a. IP address to domain name resolutionawjunaid+1
  9. Which dnsenum option disables reverse lookup for faster scans?
    a. –threads
    b. –enum
    c. –noreverse
    d. –subfile
    Answer: c. –noreverseawjunaid+1
  10. What is the default output format when saving dnsenum results with -o?
    a. CSV
    b. XML
    c. JSON
    d. TXT
    Answer: b. XMLkali+1
  11. What is the primary use-case for dnsenum in penetration testing?
    a. Password cracking
    b. Malware analysis
    c. Mapping DNS structure
    d. Wi-Fi auditing
    Answer: c. Mapping DNS structurehacking-notes+2
  12. What does the “NS” record obtained by dnsenum reveal?
    a. Network segment
    b. Name server
    c. New subdomain
    d. None of the above
    Answer: b. Name serverkali
  13. Which command would perform a basic scan using dnsenum?
    a. dnsenum -h
    b. dnsenum <domain>
    c. dnsenum -t
    d. dnsenum -s
    Answer: b. dnsenum <domain>hacking-notes+1
  14. What does the –enum option in dnsenum do?
    a. Enables enumeration shortcut
    b. Encrypts DNS data
    c. Skips scanning
    d. Increases verbosity only
    Answer: a. Enables enumeration shortcutkali
  15. In which phase of a penetration test is dnsenum typically used?
    a. Information gathering
    b. Exploitation
    c. Privilege escalation
    d. Covering tracks
    Answer: a. Information gatheringlinkedin+1
  16. dnsenum is best suited for which kind of testing?
    a. Physical security testing
    b. Web application pentesting
    c. Network reconnaissance
    d. Mobile app security
    Answer: c. Network reconnaissancehacking-notes+1
  17. Which record retrieved by dnsenum contains email server information?
    a. NS
    b. CNAME
    c. MX
    d. PTR
    Answer: c. MXlinkedin+1
  18. What flag sets the number of threads for faster enumeration in dnsenum?
    a. –enum
    b. –noreverse
    c. –threads
    d. –subfile
    Answer: c. –threadsawjunaid+1
  19. Which of the following is NOT a capability of dnsenum?
    a. Enumeration of A records
    b. Retrieval of MX and NS records
    c. Email credential brute-force
    d. Subdomain brute-force
    Answer: c. Email credential brute-forcehacking-notes+1
  20. What is required to use dnsenum legally on a domain?
    a. Paid license
    b. Physical access
    c. Proper authorization
    d. No requirement
    Answer: c. Proper authorizationawjunaid+1
  21. Which output file will store discovered IP blocks in dnsenum?
    a. domain_txt.txt
    b. domain_ips.txt
    c. output_ip.txt
    d. dns_results.txt
    Answer: b. domain_ips.txtsystemweakness+1
  22. Which scripting feature allows dnsenum to discover subdomains recursively?
    a. -h
    b. -r
    c. -w
    d. -n
    Answer: b. -rawjunaid+1
  23. dnsenum can gather extra names and subdomains using which method?
    a. Social engineering
    b. Google scraping
    c. Port scanning
    d. Packet sniffing
    Answer: b. Google scrapingsystemweakness+1
  24. Which flag writes all valid subdomains to a specific file in dnsenum?
    a. –subfile
    b. –enum
    c. –threads
    d. –delay
    Answer: a. –subfilekali
  25. What does DNS stand for in dnsenum?
    a. Digital Network Service
    b. Domain Name System
    c. Data Node Security
    d. Domain Network Structures
    Answer: b. Domain Name Systemrecordedfuture+2
  26. Which of the following is a dependency for dnsenum?
    a. Nmap
    b. perl
    c. Python3
    d. Bash
    Answer: b. perlhacking-notes+1
  27. dnsenum saves valid subdomain names into which file format by default?
    a. JSON
    b. XML
    c. TXT
    d. CSV
    Answer: b. XMLawjunaid+1
  28. Which feature in dnsenum tries to discover the BIND version running on a nameserver?
    a. Subdomain brute-force
    b. AXFR queries
    c. Zone update
    d. Reverse lookup
    Answer: b. AXFR queriessystemweakness+1
  29. Which of these is NOT an output of dnsenum?
    a. Hostnames
    b. Password hashes
    c. IP Addresses
    d. Zone transfers
    Answer: b. Password hasheskali+1
  30. Which dnsenum version is commonly installed by default in Kali Linux repositories?
    a. 0.1
    b. 1.3.1
    c. 2.5
    d. 5.0
    Answer: b. 1.3.1kali
  31. Brute-forcing subdomains in dnsenum requires which input?
    a. Subnet mask
    b. Wordlist file
    c. Hash value
    d. Log file
    Answer: b. Wordlist fileawjunaid+1
  32. dnsenum’s –whois option performs whois queries on which type of network ranges?
    a. IPv4 only
    b. C class network
    c. VPC blocks
    d. FQDN ranges
    Answer: b. C class networksystemweakness+1
  33. What is one way dnsenum helps defenders?
    a. Patch vulnerabilities
    b. Map and secure DNS infrastructure
    c. Disable DNS records
    d. Encrypt network traffic
    Answer: b. Map and secure DNS infrastructurerecordedfuture+1
  34. Which of these DNS records is NOT typically obtained by dnsenum?
    a. TXT
    b. MX
    c. A
    d. MAC
    Answer: d. MACkali
  35. Where can the official project and source code for dnsenum be found?
    a. Github
    b. Google Play
    c. Facebook
    d. Snap Store
    Answer: a. Githubgithub+1
  36. Which DNS record type is used to map hostnames to IP addresses?
    a. A record
    b. MX record
    c. CNAME record
    d. NS record
    Answer: a. A recordkali
  37. What step is advisable before using dnsenum on an organization’s domain?
    a. Email the admin
    b. Obtain written permission
    c. Change DNS records first
    d. Modify zone files
    Answer: b. Obtain written permissionhacking-notes+1
  38. Which of the following is an example of a command to brute-force subdomains with dnsenum?
    a. dnsenum –brute domain.com
    b. dnsenum -f wordlist.txt domain.com
    c. dnsenum -b wordlist.txt
    d. dnsenum -p domain.com
    Answer: b. dnsenum -f wordlist.txt domain.comawjunaid+1
  39. dnsenum supports multithreading for what purpose?
    a. Skipping slow queries
    b. Faster enumeration
    c. Encrypted results
    d. GUI interface
    Answer: b. Faster enumerationsystemweakness+2
  40. Which is NOT a function performed by dnsenum?
    a. Subdomain enumeration
    b. Zone transfer exploits
    c. Email phishing
    d. Google scraping
    Answer: c. Email phishingsystemweakness+1
  41. What is an AXFR in the context of dnsenum?
    a. A security protocol
    b. DNS zone transfer request
    c. Encryption method
    d. Data storage format
    Answer: b. DNS zone transfer requestsystemweakness+1
  42. dnsenum is part of which popular Linux security distribution by default?
    a. Ubuntu Server
    b. Debian
    c. Kali Linux
    d. Fedora
    Answer: c. Kali Linuxsystemweakness+1
  43. What does the –private flag enable in dnsenum?
    a. Private DNS query only
    b. Display of private IP addresses found
    c. Hides all output
    d. Output only to console
    Answer: b. Display of private IP addresses foundawjunaid
  44. Which option would store valid subdomains to a specific file in plain text?
    a. –subfile
    b. –private
    c. –noreverse
    d. –delay
    Answer: a. –subfilekali
  45. What is the typical role of dnsenum in red team assessments?
    a. Defense
    b. Stealth persistence
    c. Reconnaissance
    d. Malware analysis
    Answer: c. Reconnaissancelinkedin+1
  46. When would the –nocolor option be useful in dnsenum?
    a. When color output is unsupported
    b. To encrypt the output
    c. To save private IPs
    d. To perform zone transfers
    Answer: a. When color output is unsupportedkali
  47. Which record type is commonly found by dnsenum for mail delivery?
    a. MX
    b. HINFO
    c. PTR
    d. TXT
    Answer: a. MXlinkedin+1
  48. In security audits, why is enumeration with dnsenum important?
    a. To build a network map
    b. To disallow DNS usage
    c. To change user passwords
    d. To debug hardware
    Answer: a. To build a network maprecordedfuture+2
  49. Which best describes dnsenum’s Google scraping feature?
    a. Scrapes login details
    b. Finds extra subdomains via Google searches
    c. Blocks search engine bots
    d. Encrypts DNS traffic
    Answer: b. Finds extra subdomains via Google searchessystemweakness+1
  50. What can dnsenum help reveal if a DNS server is misconfigured?
    a. All DNS records for a domain
    b. SSL keys
    c. Admin credentials
    d. Device driver versions
    Answer: a. All DNS records for a domainhacking-notes+1

 

  1. https://www.hacking-notes.com/RedTeam/1.Information-Gathering/2.Active-Reconnaissance/DNSenum
  2. https://www.linkedin.com/posts/rakesh-joshi-119302215_dnsenum-is-a-perl-based-command-line-tool-activity-7325577574661668864-IqSj
  3. https://www.kali.org/tools/dnsenum/
  4. https://awjunaid.com/ethical-hacking/dnsenum-multithreaded-tool-for-dns-enumeration/
  5. https://systemweakness.com/dnsenum-sublist3r-findomain-and-massdns-tofor-dns-enumeration-b81ced20c5e6
  6. https://www.recordedfuture.com/threat-intelligence-101/tools-and-techniques/dns-enumeration
  7. https://github.com/fwaeytens/dnsenum
  8. https://hackzone.in/blog/dnsenum-step-by-step-guide/
  9. https://www.hackercoolmagazine.com/complete-guide-to-dnsenum/
  10. https://labex.io/tutorials/nmap-enumerate-dns-in-dnsenum-549936
  11. https://github.com/theMiddleBlue/DNSenum
  12. https://forum.hackthebox.com/t/hack-the-box-academy-footprinting-dns-enumeration/250408
  13. https://www.infosecinstitute.com/resources/penetration-testing/dns-enumeration-techniques-in-linux/
  14. https://www.youtube.com/watch?v=hK65WeRPqeQ
  15. https://www.oreilly.com/library/view/web-penetration-testing/9781788623377/69a5a267-6a61-45a8-b19b-1f2de783cdda.xhtml
  16. https://www.oreilly.com/library/view/learn-kali-linux/9781789611809/62aaaf63-d151-4b6d-a566-a3e22d4267f5.xhtml
  17. https://www.edureka.co/community/289791/what-commands-used-perform-enumeration-discover-subdomains
  18. https://www.youtube.com/watch?v=tOsYWvx10sk
  19. https://www.examtopics.com/discussions/comptia/view/311268-exam-pt0-003-topic-1-question-98-discussion/
  20. https://www.geeksforgeeks.org/ethical-hacking/what-is-dns-enumeration/

Leave a Reply

Your email address will not be published. Required fields are marked *

error: Content is protected !!