Exam CAS-003 topic 1 question 135 discussion

Actual exam question from CompTIA's CAS-003

Question #: 135
Topic #: 1

Company.org has requested a black-box security assessment be performed on key cyber terrain. One area of concern is the company's SMTP services. The security assessor wants to run reconnaissance before taking any additional action and wishes to determine which SMTP server is Internet-facing.
Which of the following commands should the assessor use to determine this information?

A. dnsrecon ג€"d company.org ג€"t SOA
B. dig company.org mx
C. nc ג€"v company.org
D. whois company.org

Show Suggested Answer

Suggested Answer: A 🗳️

by tek at March 24, 2020, 3:18 a.m.

Comments

Submit Cancel

tek

Highly Voted 5 years, 1 month ago

B. dig company.org mx

upvoted 14 times

...

Trap_D0_r

Highly Voted 4 years, 2 months ago

I would also use "dig" to find this out.

upvoted 5 times

Trap_D0_r

4 years, 2 months ago

The reason A is NOT correct is that the “-t SOA” makes the command specifically look for name servers with a “Start of Authority” record (the syntax also isn't really right, but that's pretty normal for *nix commands on a CompTIA exam...). Since we’re looking for SMTP we know it needs to be mail so we want an MX record.

upvoted 4 times

...

vorozco

Most Recent 3 years, 2 months ago

Selected Answer: B

B. dig company.org mx

upvoted 1 times

...

Exam CAS-003 All Questions

View all questions & answers for the CAS-003 exam

Exam CAS-003 topic 1 question 135 discussion

Comments

tek

Trap_D0_r

Trap_D0_r

vorozco

SY0-701