Which DNS enumeration technique attempts to obtain internal records when the DNS zone is not properly configured?

Which DNS enumeration technique attempts to obtain internal records when the DNS zone is not properly configured?

• A. DNS Cache Snooping
• B. DNSSEC Zone Walking
• C. LDNS
• D. IPsec

Answer: (B)

DNS enumeration when a zone isn’t properly protected often hinges on walking through the zone’s data to reveal all domain names and their records. In DNSSEC-enabled zones this takes the form of DNSSEC Zone Walking (often realized as NSEC walking). Here, the attacker leverages the chain of NSEC records that DNSSEC publishes to prove non-existence, and follows the sequence to enumerate every domain name within the zone. If the zone is misconfigured, this can expose internal records that reside in that zone. The other options don’t fit this technique: DNS Cache Snooping reveals only what a resolver has cached, not the whole zone; LDNS is a DNS client library, not a method of enumeration; IPsec is a network-layer security protocol unrelated to DNS enumeration.

DNS enumeration when a zone isn’t properly protected often hinges on walking through the zone’s data to reveal all domain names and their records. In DNSSEC-enabled zones this takes the form of DNSSEC Zone Walking (often realized as NSEC walking). Here, the attacker leverages the chain of NSEC records that DNSSEC publishes to prove non-existence, and follows the sequence to enumerate every domain name within the zone. If the zone is misconfigured, this can expose internal records that reside in that zone.

The other options don’t fit this technique: DNS Cache Snooping reveals only what a resolver has cached, not the whole zone; LDNS is a DNS client library, not a method of enumeration; IPsec is a network-layer security protocol unrelated to DNS enumeration.