Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
AXFR (Authoritative Zone Transfer) can be used to gather information about an internal network, which can be part of a footprinting technique. Footprinting is the process of collecting information about a target network to identify vulnerabilities and plan potential attacks. When an attacker performs an AXFR zone transfer, they can obtain a complete list of all DNS records within a domain, including hostnames and IP addresses. This information can be used to map out the internal network structure, identify critical systems, and discover potential targets for further exploitation. To mitigate this risk, it's important to secure AXFR transfers by implementing authentication and encryption, restricting zone transfers to authorized servers only, and monitoring for any unusual activity.
AXFR can be used for footprinting during the reconnaissance phase.
C. Footprinting the internal network Explanation: The AXFR request is typically used by attackers to obtain a complete list of DNS records, which can reveal internal IP addresses and hostnames, thereby providing a detailed map of the internal network. This information can then be used for further attacks, such as identifying critical systems or planning network intrusions.