Which of the following is a common countermeasure to prevent unauthorized DNS zone transfers?

Using TXT records to hide zone data

Disabling DNS recursion on the authoritative server

Changing the zone's SOA serial number

Restricting zone transfers to specific secondary server IP addresses

What is the primary purpose of a Whois query in the context of footprinting?

To enumerate all subdomains of a target domain

To retrieve registration details such as the registrant, registrar, and dates associated with a domain name

To identify the operating system running on a target web server

To discover the IP addresses associated with a domain's mail servers

During a penetration test, you run a Whois query for a target domain and notice that the registrant organization, email address, and phone number are all replaced with 'REDACTED FOR PRIVACY'. However, the registrar and creation date are visible. Which action would provide the most useful additional information for your footprinting effort?

Contact the registrar directly and request the full registrant details under the pretext of a legal investigation.

Query the Whois server for the registrar's own domain to identify its hosting provider.

Perform a reverse Whois lookup using the visible registrar name to find other domains registered through the same registrar.

Use the creation date and registrar information to search historical Whois records from archived databases.

Which of the following is an example of integrating footprinting data to gain additional insight?

Using a zone transfer to obtain email addresses from a mail server

Using a reverse DNS lookup to find the registrar of a domain

Using an email header's Message-ID to perform a Whois query

Using the name servers from a Whois record to query for DNS records and discover additional hosts

What is the purpose of using web scraping to harvest email addresses?

To change the content of a website

To automatically extract email addresses from web pages

To send phishing emails automatically

EC-CouncilCertified Ethical Hacker

Domain 2Objective 2

Whois, DNS and Email Footprinting CEH Practice Questions (Page 8)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

11concepts

Questions 36–40

36foundation · easy
Which of the following is a common countermeasure to prevent unauthorized DNS zone transfers?
Select an answer first
37foundation · easy
What is the primary purpose of a Whois query in the context of footprinting?
Select an answer first
38application · medium
During a penetration test, you run a Whois query for a target domain and notice that the registrant organization, email address, and phone number are all replaced with 'REDACTED FOR PRIVACY'. However, the registrar and creation date are visible. Which action would provide the most useful additional information for your footprinting effort?
Select an answer first
39foundation · easy
Which of the following is an example of integrating footprinting data to gain additional insight?
Select an answer first
40foundation · easy
What is the purpose of using web scraping to harvest email addresses?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.