Exam PT0-002 topic 1 question 257 discussion

C. The hostnames and IP addresses of internal systems Explanation: • A. The DNSSEC certificate and CA: This information is related to DNS security extensions and certificate authorities, and would not be provided by a standard AXFR (zone transfer) command. • B. The DHCP scopes and ranges used on the network: DHCP scopes and ranges are managed by DHCP servers and are not part of the DNS zone data. They would not be included in a DNS zone transfer. • C. The hostnames and IP addresses of internal systems: A DNS zone transfer (AXFR) command requests a copy of the entire zone file from a DNS server. If successful, it provides detailed information about the DNS records in the zone, including hostnames, IP addresses, mail servers, and other resource records. • D. The OS and version of the DNS server: This information pertains to the server’s operating system and software version, which is not typically revealed through a DNS zone transfer.

The command performs a DNS zone transfer, which, if successful, reveals detailed information about the DNS records within the domain. This includes hostnames and IP addresses, aiding in mapping the network.

Per cisa.gov: If improperly configured, the DNS server may respond with information about the requested zone, revealing internal network structure and potentially sensitive information.

NOT A Not likely since a DNS zone transfer (axfr) usually provides info about DNS records ( hostnames and IP addresses), but not specifically about DNSSEC certificates and Certificate Authorities (CA). NOT B axfr command is related to DNS and doesn't give info about DHCP scopes and ranges. Option is not relevant to a DNS zone transfer. CORRECT ANSWER IS C) The hostnames and IP addresses of internal systems axfr command is designed to perform a zone transfer, and if successful, would give hostnames and IP addresses of systems within the DNS zone. NOT D focused on DNS records rather than providing info about the DNS server itself.