Q: 6
You are performing a penetration test for a client and have gained shell access to a Windows machine on the internal network. You intend to retrieve all DNS records for the internal domain, if the DNS server is at 192.168.10.2 and the domain name is abccorp.local, what command would you type at the nslookup prompt to attempt a zone transfer?
Options
Discussion
Why does everyone focus on option B's typo instead of how CEH structures these? Kinda feels like they just want close syntax, not perfect Windows commands.
B , it's the only one that matches nslookup's ls -d command structure for a zone transfer, even though it's got a typo. I think exam wants intent more than perfect syntax here. Anyone disagree?
B , even though it's got a typo (should be
ls -d), that's how you'd trigger an AXFR zone transfer in nslookup after connecting to the DNS server. A looks like a distractor. Pretty sure B is what CEH wants here.B tbh, exam tricks with typos but D is just wrong command structure.
B. unless the question penalizes the typo. In most exam scenarios, closest intent like this takes priority over perfect syntax.
B, not D. D's syntax is off, and CEH practice often wants ls -d format (even if typo'd).
C or D, seen similar in courseware and some practice exams. Official guide covers nslookup options.
B or D
Leaning B since it's close to actual ls -d, but D looks tempting if you think they're after something zone specific. These CEH questions can be tricky with typos.
Leaning B since it's close to actual ls -d, but D looks tempting if you think they're after something zone specific. These CEH questions can be tricky with typos.
A , this syntax looked right to me based on some old exam sims. nslookup options are all over the place in CEH questions. Not 100% but I see A pop up in practice sets a lot too.
Probably B, but does the question assume you already switched to the DNS server with
server 192.168.10.2? That would matter here.Be respectful. No spam.
