Which term best describes publicly accessible information about a DNS zone that can be obtained via certain server configurations?

Which term best describes publicly accessible information about a DNS zone that can be obtained via certain server configurations?

• A. DNS caching
• B. DNS poisoning
• C. DNS spoofing
• D. DNS zone transfer

Answer: (D)

Zone transfers describe the process of copying the contents of a DNS zone from a primary server to secondary servers. When a DNS server is misconfigured to allow transfers to any host, you can request a zone transfer and obtain the entire zone data. That means publicly accessible information about the zone—such as all host names, IP addresses, mail servers, and other records—can be leaked simply by querying the server for a transfer. This is why zone transfer is the term that best fits the scenario. DNS caching stores previously resolved query results on a client or resolver to speed up lookups; it isn’t about exposing the full zone data. DNS poisoning and DNS spoofing involve corrupting or forging DNS responses to mislead users or redirect traffic, not about retrieving the complete zone contents via a configured transfer.

Zone transfers describe the process of copying the contents of a DNS zone from a primary server to secondary servers. When a DNS server is misconfigured to allow transfers to any host, you can request a zone transfer and obtain the entire zone data. That means publicly accessible information about the zone—such as all host names, IP addresses, mail servers, and other records—can be leaked simply by querying the server for a transfer. This is why zone transfer is the term that best fits the scenario.

DNS caching stores previously resolved query results on a client or resolver to speed up lookups; it isn’t about exposing the full zone data. DNS poisoning and DNS spoofing involve corrupting or forging DNS responses to mislead users or redirect traffic, not about retrieving the complete zone contents via a configured transfer.