Which command is used to check if zone transfers are enabled for a domain?

Enhance your skills for the CompTIA PenTest+ Exam with CertMaster. Utilize flashcards and multiple-choice questions with detailed explanations. Get fully prepared for your certification!

The command used to check if zone transfers are enabled for a domain is "dig axfr @". Zone transfers are a method used in Domain Name System (DNS) to replicate DNS databases across a set of DNS servers. The "dig" command, particularly with the "axfr" option, initiates a full zone transfer with the specified nameserver for the given domain.

When a zone transfer is successfully executed, it indicates that the DNS server allows such transfers, which is critical for DNS replication among authorized servers. Conversely, if the transfer is not permitted, it will return an error message. Thus, using this command provides a straightforward way to query the DNS server for its zone information, thereby allowing you to determine the status of zone transfers.

The other commands listed function differently and do not provide the means to check for zone transfers. For instance, "wget" is primarily used for retrieving content from web servers; "nmap" is used for network exploration and security auditing but does not specifically test for DNS zone transfers; "curl" is a tool for transferring data with URL syntax, which also does not pertain to querying for DNS zone transfer capabilities. Hence, the use of "dig axfr" is the

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy